Security Bulletin: A vulnerability in Apache Log4j affects IBM Db2 Web Query for i (CVE-2021-45105)

Summary There is a vulnerability in Apache Log4j as described in the vulnerability details section. Apache Log4j v2.16 is used by Db2 Web Query for i for generating logs and diagnostic traces in some of its components. IBM has addressed the vulnerability in Db2 Web Query for i. Vulnerability...

WordPress Orange Form plugin <= 1.0 - SQL Injection (SQLi) via Cross-Site Request Forgery (CSRF) vulnerability

SQL Injection SQLi via Cross-Site Request Forgery CSRF vulnerability discovered by Francesco Carlucci in WordPress Orange Form plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of December 29, 2021 and is not available for download. This closure is temporary,...

WordPress LabTools plugin <= 1.0 - Arbitrary Publication Deletion vulnerability

Arbitrary Publication Deletion vulnerability discovered by Muhammad Adel in WordPress LabTools plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of December 28, 2021 and is not available for download. This closure is temporary, pending a full review...

CVE-2021-44877

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...

CVE-2021-44877

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...

Improper access control

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...

PT-2021-24170 · Gnuplot +2 · Gnuplot +2

Name of the Vulnerable Software and Affected Versions: gnuplot version 5.4 Description: A Divide by Zero issue exists in the boundary3d function in graph3d.c, which could cause an Arithmetic exception and application crash. Recommendations: For gnuplot version 5.4, consider disabling the boundary...

Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity

Impact Insecure permissions on temporary directories used in fakeroot or user namespace container execution. When a Singularity action command run, shell, exec is run with the fakeroot or user namespace option, Singularity will extract a container image to a temporary sandbox directory. Due to...

WordPress Temporary Login Without Password plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. WordPress Temporary Login Without Password plugin...

CVE-2021-43325

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

CVE-2021-43326

Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory...

CVE-2021-43326

Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory...

CVE-2021-43326

Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory...

CVE-2021-43325

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

CVE-2021-43325

Automox Agent for Windows (version 33) is affected by CVE-2021-43325, which states the agent incorrectly sets permissions on a temporary directory. This issue exists due to a regression linked to CVE-2021-43326. Connected sources confirm the vulnerability is local in scope with potential to escal...

CVE-2021-43325

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

Automox Alive Automox Agent 安全漏洞

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. Automox Alive Automox Agent 33 A security vulnerability exists on Windows that originates from incorrectly setting the permissions of a temporary directory...

Automox Alive Automox Agent 安全漏洞

automox Alive Automox Agent is an agent software from the Automox Alive community. The automox Alive Automox Agent before 32 version denial of service vulnerability, which stems from the agent incorrectly setting permissions to temporary directories. An attacker could exploit this vulnerability t...

PT-2021-22829 · Unknown · Securitashome

Name of the Vulnerable Software and Affected Versions: SecuritasHome home alarm system version HPGW-G 0.0.2.23F BG U-ITR-F1-BD BL.A30.20181117 Description: The issue concerns the absence of notifications for ongoing RF jamming attacks in the system. This allows an attacker to block legitimate...

groovy: OS temporary directory leads to information disclosure

A flaw was found in Apache Groovy. Groovy makes use of a method for creating temporary directories which is not suitable for security-sensitive contexts and allows for sensitive information leakage. The highest threat from this vulnerability is to data confidentiality...