12832 matches found
Download Manager < 3.1.19 - Authenticated (author+) PHP4 File Upload to RCE
The wpdmadminuploadfile AJAX action used a blacklist approach to forbid potential dangerous files, such as PHP, from being uploaded. However, other dangerous extensions, like .php4 were not forbidden. As an author or any account with the uploadfiles capability, attach a .php4 file to a download...
Google Chrome V8 Security Bypass Vulnerability
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from insufficient data validation in V8. An attacker can exploit this vulnerability to bypass security restrictions...
USN-4892-1 openjdk-8, openjdk-lts vulnerability
It was discovered that OpenJDK incorrectly verified Jar signatures. An attacker could possibly use this issue to bypass intended security restrictions when using Jar files signed with a disabled algorithm...
The vulnerability in the driver for the Early Launch Antimalware (ELAM) security technology of Microsoft Windows allows a malicious actor to bypass security functions.
The vulnerability of the driver for the Early Launch Antimalware ELAM security technology for Microsoft Windows is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass security functions...
KLA12155 Multiple vulnerabilities in Apple iCloud
Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to obtain sensitive information, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in CoreText can be exploited to obta...
KLA12325 SB vulnerability in Apache Tomcat
A security bypass vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Apache Tomcat 7.x vulnerabilities Related products Apache-Tomcat CVE list CVE-2021-30640 unknown Solution Update to the latest version...
Security Bulletin: Vulnerabilities in Apache and Node.js affect IBM Spectrum Protect Plus
Summary Vulnerabilities in Apache and Node.js such as execution of arbitrary code on the system, cross -site scripting, and bypassing security restrictions, may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2020-28458 DESCRIPTION: Node.js datatables.net module could allow a...
CVE-2021-21646
Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...
Mozilla Thunderbird Competitive Conditions Issue Vulnerability
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A security bypass vulnerability exists in Mozilla Thunderbird, which can be exploited by...
KLA12183 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in Blink can be exploited to cause denia...
KLA12159 Multiple vulnerabilities in Oracle Java SE
Security bypass vulnerabilities were found in Oracle Java. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Oracle Critical Patch Update Advisory – April 2021 Related products Oracle-Java-JRE-1.7.x Oracle-Java-JRE-1.8.x CVE list CVE-2021-2161 hig...
KLA12160 Multiple vulnerabilities in Oracle VirtualBox
Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A security bypass vulnerability in Core component can...
KLA12149 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of...
KLA12150 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. Memory corruption...
LibreOffice 安全漏洞
LibreOffice is an open source office software suite from The Document Foundation tdf. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security vulnerability exists in LibreOffice that allows remote attackers to bypass implemented...
Google Chrome QR scanner security bypass vulnerability
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72 in the "QR scanner". An attacker can exploit this vulnerability to bypass security restrictions...
KLA12143 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in Blink can be exploited to...
Microsoft Windows Multiple Vulnerabilities (KB5001335)
This host is missing a critical security update according to Microsoft KB5001335 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
谷歌 Google Chrome 权限许可和访问控制问题漏洞
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in navigation in versions of Google Chrome prior to 90.0.4430.72. An attacker can exploit this vulnerability to bypass security restrictions...