8160 matches found
PT-2021-30627
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue concerns a locking problem for Tx timestamp tracking flush. It was introduced in version v5.15 and fixed in the same version by a specific commit. The actual impact and attack...
PT-2021-30558
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14.4 through v5.14.14 Description The issue concerns a locking problem for Tx timestamp tracking flush. It was introduced in version v5.14.4 and fixed in version v5.14.14. The actual impact and attack plausibility have...
JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91664)
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...
JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91662)
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...
JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91665)
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that could ...
JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91663)
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from a client-side cache on iOS that could contain sensitive information. An attacker could use...
JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91666)
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemm...
JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91661)
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that could ...
Cross-site Scripting (XSS) - Stored in eventum/eventum
Description Multiple Stored XSS in Administration at eventum 3.10.8 Proof of Concept // PoC.payload " Step to Reproduct Goto Administration Areas and choose to feature below Manage News Input payload into fieldTitle Manage Status Input payload into fieldTitle Manage Projects Input payload into...
webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack
Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that could ...
CVE-2019-1221
creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2025-08-31 03:01:37+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2026-09-02 01:00:07+00:00| seen| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A 2026-09-03...
CVE-2020-1032
creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422...
On Cell Phone Metadata
Interesting Twitter thread on how cell phone metadata can be used to identify and track people who dont want to be identified and tracked...
GitLab Cross-Site Scripting Vulnerability (CNVD-2021-91184)
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features.GitLab CE/EE is vulnerable to a cross-site scripting vulnerability that could b...
Approved spender can spend too many tokens
Handle cmichel Vulnerability details The approve function has not been overridden and therefore uses the internal shares, whereas transferFrom uses the rebalanced amount. Impact The approved spender may spend more tokens than desired. In fact, the approved amount that can be transferred keeps...
CVE-2021-20324
A flaw was found in WildFly Elytron. A variation to the use of a session fixation exploit when using Undertow was found despite Undertow switching the session ID after authentication. The highest threat from this vulnerability is to data confidentiality and integrity. Mitigation This attack is...
UVI-2021-1001895 ice: fix locking for Tx timestamp tracking flush
ice: fix locking for Tx timestamp tracking flush This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...
GSD-2021-1001895 ice: fix locking for Tx timestamp tracking flush
ice: fix locking for Tx timestamp tracking flush This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...
F5 Networks BIG-IP : Linux kernel vulnerability (K32380005)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4. It is, therefore, affected by a vulnerability as referenced in the K32380005 advisory. The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, a...