285 matches found
CVE-2021-41276
Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly the search filter built from the ldapid attribute of a user during the daily synchronization. A malicious user could force accounts to ...
PT-2021-7108 · Unknown +1 · Tuleap Community Edition +3
Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 13.2.99.31 Community Edition Tuleap versions prior to 13.1-5 Enterprise Edition Tuleap versions prior to 13.2-3 Enterprise Edition Description: The issue arises from improper sanitization of the search filter built fr...
UVI-2021-1000940 wq: handle VM suspension in stall detection
wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...
UVI-2021-1000888 wq: handle VM suspension in stall detection
wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...
GSD-2021-1000888 wq: handle VM suspension in stall detection
wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...
UVI-2021-1000870 wq: handle VM suspension in stall detection
wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...
UVI-2021-1000853 wq: handle VM suspension in stall detection
wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.237 by commit...
GSD-2021-1000840 wq: handle VM suspension in stall detection
wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.273 by commit...
CVE-2021-27188
The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...
CVE-2021-26267
cPanel before 92.0.9 allows a MySQL user who has an old-style password hash to bypass suspension SEC-579...
CVE-2021-26266
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...
CVE-2021-26267
cPanel before 92.0.9 allows a MySQL user who has an old-style password hash to bypass suspension SEC-579...
CVE-2021-26266
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...
Authentication flaw
cPanel before 92.0.9 allows a MySQL user who has an old-style password hash to bypass suspension SEC-579...
Authentication flaw
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...
CVE-2021-26266
CVE-2021-26266 affects cPanel prior to 92.0.9. The issue allows a Reseller to bypass the suspension lock (SEC-578). The connected documents consistently describe the vulnerability in this product/version; no root-cause or exploit details are provided beyond the bypass of the suspension mechanism....
CVE-2021-26266
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...
CVE-2021-26267
CVE-2021-26267 affects cPanel prior to 92.0.9. An MySQL user with an old-style password hash can bypass suspension (SEC-579). Remediation: update to cPanel 92.0.9 or later to resolve the issue. Exploitation status not provided in the supplied documents.
Cpanel Security Breach
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel 92.0.9, which stems from a program that allows resellers to bypass...
PT-2021-16982 · Cpanel · Cpanel
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 92.0.9 Description: The issue allows a MySQL user with an old-style password hash to bypass suspension. Recommendations: For versions prior to 92.0.9, update to version 92.0.9 or later to resolve the issue...