ICREM H8 SSRMS 安全漏洞

H8 Ssrms is a Canadian solution for the telecommunications industry. It is used to improve productivity, efficient processes, organized operations and increase profitability. A security vulnerability exists in ICREM H8 SSRMS that allows an attacker to disclose sensitive information through the...

WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-101467)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in...

CVE-2021-3380: Authorization Bypass Through User-Controlled Key

Insecure direct object reference IDOR vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive information via the Print Invoice Functionality...

exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

CVE-2019-16240

A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain...

CVE-2019-16240

CVE-2019-16240 concerns a Buffer Overflow and Information Disclosure in HP OfficeJet Pro printers (before 001.1937C) and HP PageWide Managed/HP PageWide Pro printers (before 001.1937D). A maliciously crafted print file may cause the printer to assert, potentially producing a core dump to a local ...

November 9, 2021—KB5007247 (Monthly Rollup)

None None...

November 9, 2021—KB5007246 (Security-only update)

None None...

November 9, 2021—KB5007245 (Security-only update)

None None...

November 9, 2021—KB5007236 (Monthly Rollup)

None None...

November 9, 2021—KB5007233 (Security-only update)

None None...

November 9, 2021—KB5007207 (OS Build 10240.19119) - EXPIRED

None None...

HP Inkjet printers 安全漏洞

HP Inkjet printers is an Inkjet series printer from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Inkjet printers that stems from a maliciously crafted print file may cause certain HP Inkjet printers to assert. In some cases, the printers generate a core dump to t...

PT-2021-5158

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description The issue is related to the support of RODC read-only domain controller functionality in Samba when it acts as an Active Directory Domain Controller. This could allow a remote attacker to eleva...

Samba AD DC did not correctly sandbox

Description Samba as an Active Directory Domain Controller is able to support an RODC, which is meant to have minimal privileges in a domain. However, in accepting a ticket from a Samba or Windows RODC, Samba was not confirming that the RODC is authorized to print such a ticket, via the...

CVE-2021-24710

The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24710

The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24710

The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24710

CVE-2021-24710 concerns the WordPress Print-O-Matic plugin (versions before 2.0.3). The vulnerability is a Stored Cross-Site Scripting (admin+ level) caused by failing to escape certain settings when outputting them in HTML attributes, which can be exploited by high-privilege users even if unfilt...

CVE-2021-24710 Print-O-Matic < 2.0.3 - Admin+ Stored Cross-Site Scripting

The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...