CVE-2021-43857

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8...

ROS-2-2020

2.2020 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

The vulnerability of the `salt.utils.thin.gen_thin()` function in the configuration management system and remote execution of SaltStack Salt operations allows a attacker to execute arbitrary commands on the target system.

The vulnerability of the salt.utils.thin.genthin function in the configuration management system and for remote execution of SaltStack Salt is related to insufficient validation of arguments passed in commands. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

The vulnerability of the configuration management system and the remote execution feature of SaltStack Salt allow a perpetrator to temporarily increase their privileges locally.

The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to the check for rebooting minions. Exploiting this vulnerability could allow an attacker who has the ability to create files in the directory to locally escalate their...

The vulnerability of the configuration management system and the remote execution feature of SaltStack Salt allow a perpetrator to execute arbitrary commands with elevated privileges.

The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to errors in the processing of input data in the ssh-client salt-api. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated...

ROS-2-1515

2.1515 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

Quest KACE Desktop Authority Code Issue Vulnerability

Quest KACE Desktop Authority is a desktop management software from Quest Inc. A code issue vulnerability exists in Quest KACE Desktop Authority, which can be exploited by attackers to remotely execute code...

The vulnerability of the userauth_keyboard_interactive() function in the userauth.c component of the libssh2 library allows a hacker to execute arbitrary code.

The vulnerability of the userauthkeyboardinteractive function in the userauth.c component of the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the `wheel.pillar_roots.write` component in the configuration management system and the remote execution of SaltStack Salt, which is related to errors in data validation, allows a perpetrator to execute arbitrary code.

The vulnerability of the wheel.pillarroots.write component in the configuration management system and the remote execution of SaltStack Salt are related to errors during data validation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Veritas Enterprise Vault EVStgOfflineOpns Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Veritas Enterprise Vault. Authentication is not required to exploit this vulnerability. The specific flaw exists within EVStgOfflineOpns.exe. The issue results from the lack of proper validation of...

log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender

A flaw was found in the Java logging library Apache Log4j in version 1.x. JMSAppender in Log4j 1.x is vulnerable to deserialization of untrusted data. This allows a remote attacker to execute code on the server if the deployed application is configured to use JMSAppender and to the attacker's JND...

Google Android out-of-bounds write vulnerability (CNVD-2021-101951)

Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds write vulnerability exists in Google Android, which can be exploited by attackers to cause remote information disclosure without additional execution privileges...

PT-2021-7579 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.6 macOS versions prior to 12.3 macOS Catalina versions prior to Security Update 2022-004 Description: The issue is related to insufficient input validation and a buffer overflow in memory, which can be exploited b...

CVE-2021-27447

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...

Security Bulletin: IBM Content Navigator container deployments are vulnerable to a remote execution vulnerability (Log4j)

Summary IBM Content Navigator container deployments are vulnerable to a remote execution vulnerability. IBM Content Navigator has addressed the vulnerability as described below. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrar...

The vulnerability of the cgi/options.py parameters in the GNU Mailman mailing list management package, related to the lack of protection for the website structure, allows for the execution of arbitrary JavaScript code.

The vulnerability in the cgi/options.py module of the GNU Mailman mailing list management package relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary JavaScript code...

The vulnerability of the AADI GeoView Webservice, a software tool for meteorological observations, lies in the lack of protection for the SQL query structure, allowing attackers to execute arbitrary SQL commands.

The vulnerability of the AADI GeoView Webservice software for meteorological observations lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

The vulnerability of the CommCell storage management software lies in its flawed code generation mechanism, which allows an attacker to execute arbitrary code.

The vulnerability of the CommCell storage management software is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...

The vulnerability of Vim editor, related to reading beyond the buffer’s boundaries, allows a hacker to execute arbitrary commands.

The vulnerability of the Vim editor is related to reading beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by running a script using the parameter -s in the command line...

USN-5195-1: Mumble vulnerability

It was discovered that the Mumble client supported websites for public servers with arbitrary URL schemes. If a user were tricked into visiting a malicious website from the public server list, a remote attacker could possibly execute arbitrary code...