1615 matches found
CVE-2021-21640
A flaw was found in Jenkins. Due to lack of validation of the newly created view name, an attackers with View/Create permission are allowed to create views with invalid or already-used names...
CVE-2021-21640: Undefined Security Weakness
Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names...
CVE-2019-25026: Undefined Security Weakness
Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting...
CVE-2021-1765: Undefined Security Weakness
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy...
CVE-2021-29251: Undefined Security Weakness
BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register in Server Settings Policies. This affects Docker use cases in which a mail server is configured...
CVE-2021-23004: Undefined Security Weakness
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, Multipath TCP MPTCP forwarding flows may be created on standard virtual servers without MPTCP enabled in the applied TCP profile...
CVE-2020-24391: Undefined Security Weakness
mongo-express before 1.0.0 offers support for certain advanced syntax but implements this in an unsafe way. NOTE: this may overlap CVE-2019-10769...
CVE-2021-28794: Undefined Security Weakness
The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath...
CVE-2021-2138: Undefined Security Weakness
Vulnerability in the Oracle Cloud Infrastructure Data Science Notebook Sessions. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Cloud Infrastructure Data Science Notebook Sessions executes...
CVE-2021-22661: Undefined Security Weakness
Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E Versions 1.9.62 and prior...
CVE-2021-23962: Undefined Security Weakness
Incorrect use of the ' ' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox 85...
CVE-2020-36254: Undefined Security Weakness
scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...
CVE-2020-36251: Undefined Security Weakness
ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove everyone else's access to that share...
CVE-2021-26934: Undefined Security Weakness
An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation aka be-alloc mode of the drmxenfront drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry...
CVE-2021-27138: Undefined Security Weakness
The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT...
CVE-2021-27097: Undefined Security Weakness
The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT...
CVE-2020-28449: Undefined Security Weakness
This affects all versions of package decal. The vulnerability is in the set function...
CVE-2020-28450: Undefined Security Weakness
This affects all versions of package decal. The vulnerability is in the extend function...
CVE-2021-26687: Undefined Security Weakness
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 February 2021...