5728 matches found
CVE-2021-31897
In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...
CVE-2021-31897
In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...
Code injection
In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...
CVE-2021-31897
In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...
CVE-2021-31897
CVE-2021-31897 affects JetBrains WebStorm prior to 2021.1, where code execution without user confirmation was possible for untrusted projects. The vulnerability is documented across multiple sources (NVD entry and Red Hat advisory) and is addressed in WebStorm 2021.1 per JetBrains’ Q1 2021 Securi...
Unauthorized access vulnerability in the website building system of Jiangsu Wolye Software Co.
Jiangsu Wo Ye Software Co., Ltd. focuses on auditing, housing construction, transportation, municipal, high-speed rail, safety supervision, water conservancy, farmland renovation, river lake long system, major projects, investment promotion, big visit, archives, Zanxue.com, the seven-color sheep...
CVE-2021-2258
Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...
CVE-2021-2258
Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...
Design/Logic Flaw
Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...
CVE-2021-2258
Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...
CVE-2021-2258
Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...
cc.eamon.open:auth (=0.0.2), cn.easyproject:easyshiro-redis-cache (=2.6.0-RELEASE) +770 more potentially affected by CVE-2020-17510 via org.apache.shiro:shiro-spring (>=1.0.0-incubating <=1.6.0)
org.apache.shiro:shiro-spring MAVEN version =1.0.0-incubating, =1.0, =1.0, =1.0.0, =1.0.4 - cn.org.awcp:awcp-formdesigner-applicationImpl =1.0-RELEASE - cn.org.awcp:awcp-metadesigner-applicationImpl =1.0-RELEASE - cn.org.awcp:awcp-unit-application =1.0-RELEASE and more Source cves: CVE-2020-17510...
Oracle E-Business Suite 安全漏洞
Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability in Oracle Projects User...
CVE-2021-30163
Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to projectid values...
CVE-2021-30163
Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to projectid values...
Design/Logic Flaw
Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to projectid values...
CVE-2021-30163
Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to projectid values...
CVE-2021-30163
Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to projectid values...
Redmine 信息泄露漏洞
Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . A security vulnerability exists in Redmine versions prior to 4.0.8 and versions prior to 4.1.x serie...