CVE-2021-21508: Insertion of Sensitive Information into Log File

Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager. A sys-admin user may exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

PT-2021-12065

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in the sys admin user edit.php component. These vulnerabilities can be exploited via the filename, mid, userid, and templet...