10666 matches found
RHEL 8 : thunderbird (RHSA-2021:0658)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0658 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.8.0. Security Fixes: Mozilla:...
Arbitrary JavaScript Execution
Overview In affected versions of less-openui5 processing untrusted theming resources might execute arbitrary code. Impact When processing theming resources i.e. .less files with less-openui5 that originate from an untrusted source, those resources might contain JavaScript code which will be...
The vulnerability of the Intel PROSet/Wireless WiFi connection utility arises from incomplete cleaning of temporary or auxiliary resources. This allows a malicious actor to disclose protected information or cause service failures.
The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...
CVE-2021-20066
A flaw was found in jsdom. JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...
Credential-Stuffing Attack Targets Regional Internet Registry
Regional internet registry RIPE NCC is warning of a credential-stuffing attack against its single sign-on service, RIPE NCC Access, and is encouraging users to implement two-factor authentication 2FA. Click to Register Located in Amsterdam, the Réseaux IP Européens Network Coordination Centre RIP...
CVE-2021-22854
The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege...
CVE-2021-22853
The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work...
Soar Cloud System HR Code Issue Vulnerability
Soar Cloud System HR is an application from Soar Cloud China. It provides a human resources system. A code issue vulnerability exists in Soar Cloud System that arises from improper design or implementation during code development for a web-based system or product...
Jetty Resource Management Error Vulnerability
A resource management error vulnerability exists in Jetty that arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a network system or product...
CVE-2021-20066
JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...
CVE-2021-20066
JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...
UBUNTU-CVE-2021-20066
JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...
Code injection
JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...
CVE-2021-20066
JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...
CVE-2021-20066
JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...
CVE-2021-20066
CVE-2021-20066 affects the JSDom project and describes an issue where local resources can be loaded improperly, allowing a malicious web page to manipulate local files when script execution is enabled. The core description across sources states that loading of local resources can bypass access re...
CVE-2021-21316
less-openui5 is an npm package which enables building OpenUI5 themes with Less.js. In less-openui5 before version 0.10., when processing theming resources i.e. .less files with less-openui5 that originate from an untrusted source, those resources might contain JavaScript code which will be execut...
Privilege escalation
less-openui5 is an npm package which enables building OpenUI5 themes with Less.js. In less-openui5 before version 0.10., when processing theming resources i.e. .less files with less-openui5 that originate from an untrusted source, those resources might contain JavaScript code which will be execut...
JSDom Security Vulnerabilities
A security vulnerability exists in JSDom that stems from incorrectly allowing local resources to be loaded, which allows local files to be manipulated by a malicious web page when script execution is enabled...
CVE-2020-4956
IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit...