Privoxy -- Multiple vulnerabilities (memory leak, XSS)

Privoxy reports: cgierrornotemplate: Encode the template name to prevent XSS cross-site scripting when Privoxy is configured to servce the user-manual itself. Commit 0e668e9409c. OVE-20211102-0001. CVE-2021-44543. Reported by: Artem Ivanov geturlspecparam: Free memory of compiled pattern spec...

CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

CVE-2021-43544: Improper Neutralization of Input During Web Page Generation

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

PT-2021-23862

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 95 Description The issue arises when Firefox for Android receives a URL through a SEND intent. Instead of directly loading the URL, Firefox would initially search for the text. However, subsequent uses of...

Mozilla Firefox 跨站脚本漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox has a cross-site scripting vulnerability that stems from the fact that Firefox searches for text when a URL is received via the SEND intent, but subsequent use of the address bar can cause the URL to load...

PT-2021-16379

Name of the Vulnerable Software and Affected Versions: Registrations for the Events Calendar WordPress plugin versions prior to 2.7.6 Description: The issue arises from the lack of sanitization and escaping of the event id in the /wp-admin/admin-ajax.php 'rtec send unregister link' AJAX action,...

GLPI 路径遍历漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

PT-2021-23927

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 2.6.1 Description: The issue is related to a path traversal vulnerability in GLPI instances with the barcode plugin installed. This vulnerability was patched in version 2.6.1. Recommendations: For versions prior to 2.6....

PT-2021-17002

Name of the Vulnerable Software and Affected Versions AMD SEV Firmware affected versions not specified Description The issue is related to insufficient validation of the AMD SEV Signing Key ASK in the SEND START command in the SEV Firmware. This may allow a local authenticated attacker to perform...

kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type

A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent interprocess communication. An attacker, with the ability to send TIPC messages to the target, can corrupt memory and escalate privileges on the target system...

PT-2021-26470

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.155 Description A potential memory leak issue was identified in the digital in send sdd req function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2021-26386

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.290 Description: A potential memory leak issue was identified in the digital in send sdd req function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-30621

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.14 Description A potential memory leak issue was identified in the digital in send sdd req function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Lin...

PT-2021-26626

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.13 through 5.14 Description: A potential memory leak issue was identified in the digital in send sdd req function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-26447

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.13 through v4.19.212 Description A potential memory leak issue was identified in the digital in send sdd req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-30381

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.290 Description A potential memory leak issue was identified in the digital in send sdd req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26404

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.13 through v4.9.287 Description A potential memory leak issue was identified in the digital in send sdd req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30442

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.13 through v4.19.212 Description A potential memory leak issue was identified in the digital in send sdd req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...