CVE-2020-28088: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

PT-2021-21319

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue allows an attacker to reset the password to the administrative interface of the router. This is possible due to a problem in the set sys init function in the login.cgi binary...

PT-2021-21317

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue concerns a command injection in the set sys cmd function within the adm.cgi binary. This function is accessible when the page parameter is set to sysCMD, allowing the command...

CVE-2020-28087: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

PT-2021-11443

Name of the Vulnerable Software and Affected Versions: jeecg-boot CMS version 2.3 Description: A SQL injection issue in the "/jeecg boot/sys/dict/loadtreedata" endpoint of jeecg-boot CMS allows attackers to access sensitive database information. Recommendations: For jeecg-boot CMS version 2.3,...

PT-2021-14610

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS affected versions not specified Description The issue allows a user with specific privileges, including ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE and ISI PRIV SYS UPGRADE or ISI PRIV AUDIT, to provide an untrusted...

An admin can downgrade or remove a group with sys admin privilege

This vulnerability affects certain versions of Atlassian Dev Tools. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent...

An admin can downgrade or remove a group with sys admin privilege

This vulnerability affects certain versions of Atlassian Dev Tools. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent...

blktrace: Buffer overflow

Background blktrace shows detailed information about what is happening on a block device IO queue. Description A crafted file could cause a buffer overflow in the ‘devmapread’ function because the device and devno arrays are too small. Impact A remote attacker could entice a user to open a...

Bugs in NVIDIA’s Jetson Chipset Opens Door to DoS Attacks, Data Theft

Flaws impacting millions of internet of things IoT devices running NVIDIA’s Jetson chips open the door for a variety of hacks, including denial-of-service DoS attacks or the siphoning of data. NVIDIA released patches addressing nine high-severity vulnerabilities including eight additional bugs of...

PT-2021-7416

Name of the Vulnerable Software and Affected Versions Realtek HAD affected versions not specified Realtek High-Definition Audio HDA Drivers affected versions not specified Description The issue is related to a driver crash vulnerability in Realtek HAD, which allows local attackers to send a speci...

Fedora: Security Advisory for rust-aom-sys (FEDORA-2021-1c3f7963a5)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: rust-aom-sys-0.2.1-5.fc34

FFI bindings to aom...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Realtek Hda_Driver

CVE-2021-32537: Out-of-bounds access in RTKVHD64 leading to po...

CVE-2021-22130: Out-of-bounds Write

A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 may allow an authenticated, remote attacker to perform a Denial of Service attack by running the diagnose sys cpuset with a large cpuset mask value...

PT-2021-14859

Name of the Vulnerable Software and Affected Versions FortiProxy physical appliance CLI versions 1.0.0 through 1.0.7 FortiProxy physical appliance CLI versions 1.1.0 through 1.1.6 FortiProxy physical appliance CLI versions 1.2.0 through 1.2.9 FortiProxy physical appliance CLI versions 2.0.0 throu...

Fortinet FortiProxy SSL VPN 缓冲区错误漏洞

Fortinet FortiProxy SSL VPN is a software application from Fortinet. It provides an intrusion detection feature. A buffer error vulnerability exists in Fortinet FortiProxy SSL VPN, which stems from a boundary error in the FortiProxy physical device CLI. An authenticated remote user can run...

PT-2021-28541

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.2 Description The issue is related to a kernel panic when invoking sys read traced by kprobe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2021-24547

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.2 Description: A potential security issue exists where invoking sys read traced by kprobe can cause a kernel panic. The actual impact and attack plausibility have not yet been proven. Recommendations:...

CVE-2020-10774: Buffer Access with Incorrect Length Value

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rhfeatures file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to...