UBUNTU-CVE-2021-33515

The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address...

PT-2021-3385 · Dovecot +9 · Dovecot +9

Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.15 Description: The issue is related to the submission service in Dovecot, which allows STARTTLS command injection in lib-smtp. This can lead to sensitive information being redirected to an attacker-controlled...

Enphase Energy Envoy Command Injection Vulnerability

Enphase Energy Envoy is a gateway device used to connect smart home devices from Enphase Energy, Inc. A command injection vulnerability exists in Enphase Energy Envoy, which originates from the update-start feature in the installer update-start, and can be exploited remotely to execute arbitrary...

VX Search 13.5.28 Unquoted Service Path

Exploit Title: VX Search 13.5.28 - 'Multiple' Unquoted Service Path Discovery by: Brian Rodriguez Date: 16-06-2021 Vendor Homepage: https://www.vxsearch.com Software Links: https://www.vxsearch.com/setupsx64/vxsearchsrvsetupv13.5.28x64.exe...

CVE-2020-25755

An issue was discovered on Enphase Envoy R3.x and D4.x and other current devices. The upgradestart function in /installer/upgradestart allows remote authenticated users to execute arbitrary commands via the force parameter...

PT-2024-11239 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been reported in the SocketCAN driver for Microchip CAN BUS Analyzer Tool. The issue arises from unfreed usb coherent buffers in the mcba usb start function...

CVE-2021-32684

magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec,...

Adobe Magento App 安全漏洞

Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides features such as rights management, search engine and payment gateway. A security vulnerability exists in Create Magento App that stems from the lack of implementati...

CVE-2021-25683

It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...

SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2020:14588-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14588-1 advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are...

PT-2024-11328 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a resource leak in the Linux kernel's megaraid sas driver. When the scsi add host or megasas start aen function fails during the PCI device probe, the driver do...

GHSA-QR2J-WRHX-4829 Go Ethereum Improper Input Validation

In Go Ethereum aka geth before 1.8.14, TraceChain in eth/apitracer.go does not verify that the end block is after the start block. Specific Go Packages Affected github.com/ethereum/go-ethereum/eth...

UBUNTU-CVE-2020-25713

A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...

Exploit for Incorrect Authorization in Apache Solr

Apache Solr RCE CVE-2020-13957 Docker Demo !docker-demo...

Veeam CDP service does not start after the installation of the storage integration plug-in

Challenge Certain primary storage integration plug-in setup programs leave the Veeam Continuous Data Protection Veeam CDP service stopped after the installation. The following plug-ins are affected: Dell EMC SC Compellent Plug-In for Veeam Backup & Replication Tintri IntelliFlash Plug-In for Veea...

April 28, 2021—KB5001391 (OS Builds 19041.964 and 19042.964) Preview

None None...

KB5001412: Setup Dynamic Update for Windows 10, version 2004 and 20H2: April 27, 2021

None None...

OpenPLC 3 - Remote Code Execution (Authenticated)

Exploit Title: OpenPLC 3 - Remote Code Execution Authenticated Date: 25/04/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.openplcproject.com/ Software Link: https://github.com/thiagoralves/OpenPLCv3 Version: OpenPLC v3 Tested on: Ubuntu 16.04,Debian 9,Debian 10 Buster...

CVE-2021-24235

The Goto WordPress theme before 2.0 does not sanitise the keywords and startdate GET parameter on its Tour List page, leading to an unauthenticated reflected Cross-Site Scripting issue...

The vulnerability of Thunderbird’s email client stems from insufficient validation of input data during the IMAP connection setup using STARTTLS. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Thunderbird email client is related to insufficient validation of input data during the IMAP connection setup using STARTTLS. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...