14794 matches found
The vulnerability of the Apache HTTP Server’s web server, related to defects in pathname restriction, allows attackers to execute arbitrary code or read arbitrary files on the target system.
The vulnerability of the Apache HTTP Server is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or read arbitrary files on the target system...
CVE-2021-32626
A heap buffer overflow was found in redis. Specially crafted Lua scripts executing in Redis cause the heap-based Lua stack to overflow due to incomplete checks for this condition. This flaw allows a remote attacker to corrupt the heap and potentially trigger remote code execution. The highest...
PT-2021-23327 · Archibus · Archibus Web Central
Name of the Vulnerable Software and Affected Versions: ARCHIBUS Web Central versions 21.3.3.815 and earlier Description: The issue arises from the Web Application in /archibus/login.axvw, where a session token could be assigned that is already in use by another user. This allowed access to the...
PT-2021-22730 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.13 and later Description: The issue concerns an endpoint that discloses names of private groups with access to a project to low-privileged users who are part of that project. Recommendations: For GitLab EE versions 8.13 a...
Translate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Put the following payload in the Floating Widget Settings Custom tex...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that stems from not properly...
AZL-6846 CVE-2021-32628 affecting package redis for versions less than 6.2.6-1
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves modifying the default ziplist...
CVE-2021-32687
Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap and potentially be used to leak arbitrary contents of the heap or trigger remote code execution. The vulnerability involves changing the...
UBUNTU-CVE-2021-32628
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves modifying the default ziplist...
UBUNTU-CVE-2021-32626
Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote co...
CVE-2021-41099
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and potentially result with denial of service or remote code execution. The vulnerability involves changing the default proto-max-bulk-len...
ManageEngine EventLog Analyzer < Build 12201 REST API Restriction Bypass RCE
Binary data manageengineeventloganalyzercve-2021-40539.nbin...
PT-2021-21211 · Dell · Dell Enterprise Sonic Os
Name of the Vulnerable Software and Affected Versions: Dell Enterprise SONiC OS versions 3.3.0 and earlier Description: The issue allows an authenticated malicious user with access to the system to read sensitive information using the TACACSRadius credentials stored, potentially using it in furth...
JVN#52694228: Multiple vulnerabilities in Cybozu Remote Service
Cybozu Remote Service provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-525 Cross-site request forgery vulnerability in the management screen CWE-352 - CVE-2021-20795 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N| Base Score:...
PT-2021-10541 · Tenda · Tenda Ac9
Name of the Vulnerable Software and Affected Versions: Tenda AC9 version V15.03.06.60 EN Description: A stack-based buffer overflow in the httpd server allows remote attackers to execute arbitrary code or cause a denial of service DoS via a crafted POST request to "/goform/SetStaticRouteCfg"...
PT-2021-10433 · Wuzhicms · Wuzhi Cms
Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 4.1.0 Description: The issue is a remote code execution RCE vulnerability located in the attachmentadminindex.php file. Recommendations: For Wuzhi CMS version 4.1.0, consider restricting access to the index.php file in the...
GHSA-9P5G-VG43-MJ5R Druid ingestion system Authenticated users can read data from other sources than intended
In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not a...
Druid ingestion system Authenticated users can read data from other sources than intended
In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not a...
