CVE-2021-2482

Vulnerability in the Oracle Payables product of Oracle E-Business Suite component: Invoice Approvals. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payables. Successful...

CVE-2021-3889

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3888

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3889

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

Null pointer dereference

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3888

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3889

CVE-2021-3889 affects Libmobi, a C library for MOBI/Kindle formats. Connected sources describe an out-of-bounds read in mobi_decompress_huffman_internal caused by unsafe Huffman code_length handling, leading to a heap-buffer-overflow and potential memory disclosure or crash when processing input....

CVE-2021-3889 Use of Out-of-range Pointer Offset in bfabiszewski/libmobi

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3889

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3888 Use of Out-of-range Pointer Offset in bfabiszewski/libmobi

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3888

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-31371

Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an QFX5000 Series switch, leaking configuration information such as heartbeats, kernel versions, etc. out to the...

MediaWiki 跨站脚本漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy internal knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki versions 1.31.0 through 1.36.1, which stems from...

PT-2021-21345 · Digi · Digi Realport

Name of the Vulnerable Software and Affected Versions: Digi RealPort versions 4.8.488.0 through 4.10.490 Description: The authentication mechanism in Digi RealPort relies on a challenge-response system that provides access to the server password, rendering the protection ineffective. An attacker...

CVE-2021-20552

IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 199170...

CVE-2021-20372

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518...

PT-2021-7979 · Unknown +3 · Stb Image.H +3

Name of the Vulnerable Software and Affected Versions: stb image.h versions 1.33 through 2.27 Description: The issue is related to the HDR loader in stb image.h, which parses truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. This could allow a remote attacker to cau...

CVE-2021-29758

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169...

CVE-2021-39351 WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection

The WP Bannerize WordPress plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites. This issue affects versions 2.0.0 - 4.0.2...

IBM Sterling File Gateway 信息泄露漏洞

IBM Sterling File Gateway is an application for transferring files between internal and external partners, allowing you to more securely and reliably transfer files with trading partners.An information disclosure vulnerability exists in IBM Sterling File Gateway version 6.0.1.0-6.1.0.2. An attack...