Lucene search
+L

285 matches found

NVD
NVD
added 2021/12/15 8:15 p.m.18 views

CVE-2021-41276

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly the search filter built from the ldapid attribute of a user during the daily synchronization. A malicious user could force accounts to ...

7.2CVSS0.0148EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/11/17 12:00 a.m.18 views

PT-2021-7108 · Unknown +1 · Tuleap Community Edition +3

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 13.2.99.31 Community Edition Tuleap versions prior to 13.1-5 Enterprise Edition Tuleap versions prior to 13.2-3 Enterprise Edition Description: The issue arises from improper sanitization of the search filter built fr...

8.5CVSS6.7AI score0.0148EPSS
SaveExploits0References8
OSV
OSV
added 2021/06/30 12:25 a.m.13 views

UVI-2021-1000940 wq: handle VM suspension in stall detection

wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:04 a.m.11 views

UVI-2021-1000888 wq: handle VM suspension in stall detection

wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:04 a.m.17 views

GSD-2021-1000888 wq: handle VM suspension in stall detection

wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:02 a.m.13 views

UVI-2021-1000870 wq: handle VM suspension in stall detection

wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:01 a.m.17 views

UVI-2021-1000853 wq: handle VM suspension in stall detection

wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.237 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:00 a.m.16 views

GSD-2021-1000840 wq: handle VM suspension in stall detection

wq: handle VM suspension in stall detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.273 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/02/12 8:15 a.m.10 views

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

7.5CVSS7.1AI score0.01804EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/26 6:16 p.m.27 views

CVE-2021-26267

cPanel before 92.0.9 allows a MySQL user who has an old-style password hash to bypass suspension SEC-579...

7.5CVSS7.6AI score0.00919EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/26 6:16 p.m.9 views

CVE-2021-26266

cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...

7.5CVSS5.8AI score0.00919EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/26 6:16 p.m.7 views

CVE-2021-26267

cPanel before 92.0.9 allows a MySQL user who has an old-style password hash to bypass suspension SEC-579...

7.5CVSS7.1AI score0.00919EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/01/26 6:16 p.m.8 views

CVE-2021-26266

cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...

7.5CVSS7.3AI score0.00919EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/26 6:16 p.m.22 views

Authentication flaw

cPanel before 92.0.9 allows a MySQL user who has an old-style password hash to bypass suspension SEC-579...

5CVSS7.6AI score0.00919EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/01/26 6:16 p.m.21 views

Authentication flaw

cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...

5CVSS7.5AI score0.00919EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/01/26 3:35 a.m.63 views

CVE-2021-26266

CVE-2021-26266 affects cPanel prior to 92.0.9. The issue allows a Reseller to bypass the suspension lock (SEC-578). The connected documents consistently describe the vulnerability in this product/version; no root-cause or exploit details are provided beyond the bypass of the suspension mechanism....

7.5CVSS7.5AI score0.00919EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/26 3:35 a.m.28 views

CVE-2021-26266

cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...

7.7AI score0.00919EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/26 3:35 a.m.77 views

CVE-2021-26267

CVE-2021-26267 affects cPanel prior to 92.0.9. An MySQL user with an old-style password hash can bypass suspension (SEC-579). Remediation: update to cPanel 92.0.9 or later to resolve the issue. Exploitation status not provided in the supplied documents.

7.5CVSS7.5AI score0.00919EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.13 views

Cpanel Security Breach

Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel 92.0.9, which stems from a program that allows resellers to bypass...

7.5CVSS7.1AI score0.00919EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/01/26 12:00 a.m.14 views

PT-2021-16982 · Cpanel · Cpanel

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 92.0.9 Description: The issue allows a MySQL user with an old-style password hash to bypass suspension. Recommendations: For versions prior to 92.0.9, update to version 92.0.9 or later to resolve the issue...

7.5CVSS7.6AI score0.00919EPSS
SaveExploits0References3
Rows per page
Query Builder