6989 matches found
Null pointer dereference
A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to cause a denial of service, forcing the device to reboot via a crafted HTTP request...
Reboot of PunkSpider Tool at DEF CON Stirs Debate
Researchers will release a reboot of a controversial tool that crawls the web to identify back-end vulnerabilities in websites in the hopes that companies will quickly fix them and reduce security risks. However, experts have mixed feelings about the tool called PunkSpider, created by the analyti...
Mitsubishi Electric GOT2000 安全漏洞
The Mitsubishi Electric GOT2000 is a GOT2000 series graphical operator terminal from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric GOT2000 that originates from stopping the product's communication function by quickly and repeatedly connecting and...
Security update for systemd (moderate)
openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2021:1082-1 Rating: moderate References: 1184994 1188063 Cross-References: CVE-2021-33910 CVSS scores: CVE-2021-33910 SUSE: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An...
openSUSE: Security Advisory for systemd (openSUSE-SU-2021:1082-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-1599
A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal CVP could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the...
CVE-2021-1599
A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal CVP could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the...
Cross site scripting
A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal CVP could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the...
CVE-2021-1599 Cisco Unified Customer Voice Portal Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal CVP could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the...
CVE-2021-1599 Cisco Unified Customer Voice Portal Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal CVP could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the...
CVE-2021-1599: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal CVP could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:2427-1 Rating: important References: 1153720 1174978 1179610 1181193 1185428 1185701 1185861 1186463 1186484 1187038 1187050 1187215 1187452 1187554 1187595 1187601 1188062 1188116 Cross-References:...
Cisco Unified Customer Voice Portal 跨站脚本漏洞
Cisco Unified Customer Voice Portal CVP can be used as a standalone interactive voice response IVR system or integrated with a contact center.A cross-site scripting vulnerability exists in the Web management interface of Cisco Unified Customer Voice Portal 12.51 and prior versions, which could be...
openSUSE: Security Advisory for the (openSUSE-SU-2021:2409-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for systemd (moderate)
openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2021:2404-1 Rating: moderate References: 1184994 1188063 Cross-References: CVE-2021-33910 CVSS scores: CVE-2021-33910 SUSE: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An...
Security update for dbus-1 (important)
openSUSE Security Update: Security update for dbus-1 Announcement ID: openSUSE-SU-2021:1056-1 Rating: important References: 1187105 Cross-References: CVE-2020-35512 CVSS scores: CVE-2020-35512 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-35512 SUSE: 7...
Cisco IOS XE DoS
The vulnerability of Cisco IOS and Cisco IOS XE software for Cisco Catalyst 4500 and Cisco Catalyst 4500-X network devices is related to exception handling flaws. Exploiting this vulnerability can allow an attacker to trigger a device reboot, a failed termination of the application, or a service...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:2415-1 Rating: important References: 1188062 1188116 Cross-References: CVE-2021-22555 CVE-2021-33909 CVSS scores: CVE-2021-22555 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-22555...