JetBrains YouTrack Elevation of Privilege Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack has an elevation of privilege vulnerability that could be exploited by an attacker to bypass implemented security restrictions and elevate privileges on the system...

CVE-2021-22937

creationtimestamp| type| source ---|---|--- 2021-08-06 13:54:25+00:00| published-proof-of-concept| Telegram/OlmIWfCf04jqftw8Cq-ou5J6g6om6u87bzbeyzb222HA 2021-08-06 14:51:28+00:00| published-proof-of-concept| https://t.me/CyberSecurityIL/4542 2021-08-06 17:57:30+00:00| published-proof-of-concept|...

CVE-2021-29974

CVE-2021-29974 affects Mozilla Firefox before 90. When network partitioning is enabled (e.g., via Enhanced Tracking Protection), a TLS error page could allow overriding an error on an HSTS domain, violating intended error handling. The issue does not affect network connections, which still upgrad...

Citizen's New Service Helps Paying Users Summon the Cops

The crime-tracking app is charging $20 per month to give subscribers access to their own virtual security service...

SUSE-SU-2021:2600-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential information leak and further memory...

CVE-2021-37160

creationtimestamp| type| source ---|---|--- 2021-08-02 16:27:24+00:00| seen| https://t.me/cibsecurity/26673 2021-08-03 12:35:49+00:00| seen| https://t.me/truesecator/1966 2024-11-14 06:09:31+00:00| seen| MISP/46f73e2c-5f95-4a7a-a992-f10051bb2c5c...

CVE-2021-3490

creationtimestamp| type| source ---|---|--- 2021-07-30 07:13:19+00:00| published-proof-of-concept| https://t.me/linkersec/98 2021-07-30 19:51:20+00:00| seen| https://t.me/ctinow/37820 2021-08-31 23:56:20+00:00| seen|...

CISA Alert: Top Routinely Exploited Vulnerabilities

On July 28, 2021, the U.S. Cybersecurity and Infrastructure Security Agency CISA released a cybersecurity advisory detailing the top 30 publicly known vulnerabilities that have been routinely exploited by cyber threat actors in 2020 and 2021. Organizations are advised to prioritize and apply...

CVE-2021-30744

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site...

SourceCodester Travel Management System File Upload Vulnerability

SourceCodester Travel Management System is a software application. An automated system designed to help customers easily check their parcel details while helping travel companies track packages online. A file upload vulnerability exists in SourceCodester Travel Management System v1.0, which can b...

UBUNTU-CVE-2021-30744

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site...

CVE-2021-21443

Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG OTRS Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27...

[SECURITY] Fedora 34 Update: fossil-2.14.2-1.fc34

Fossil is a simple, high-reliability, distributed software configuration management with distributed bug tracking, distributed wiki and built-in web interface...

WordPress Advanced Shipment Tracking for WooCommerce plugin <= 3.2.6 - Authenticated WordPress Options Change vulnerability

Authenticated WordPress Options Change vulnerability discovered by Jerome Bruandet in WordPress Advanced Shipment Tracking for WooCommerce plugin versions = 3.2.6. Solution Update the WordPress Advanced Shipment Tracking for WooCommerce plugin to the latest available version at least 3.2.7...

Atlassian JIRA Server Cross-Site Scripting Vulnerability (CNVD-2021-55939)

Atlassian JIRA Server is the server version of a defect tracking management system from Atlassian Australia. The system is mainly used for tracking and managing various types of issues and defects in work. A cross-site scripting vulnerability exists in Atlassian Jira Server, which can be exploite...

Atlassian JIRA Server Cross-Site Scripting Vulnerability (CNVD-2021-55940)

Atlassian JIRA Server is the server version of a defect tracking management system from Atlassian Australia. The system is mainly used for tracking and managing various types of problems and defects in work. A cross-site scripting vulnerability exists in Atlassian JIRA Server, which can be...

Security Bulletin: Addressing the Sqlite Vulnerability CVE-2021-20227

Summary IBM Tivoli Composite Application Manager ITCAM for Transactions - Transaction Tracking has addressed the following SQLite vulnerability: Vulnerability Details CVEID: CVE-2021-20227 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by a use-after-free flaw in the SELECT quer...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RLSA-2021:2717 Important: systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...

ALSA-2021:2714 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sizet-to-int conversion vulnerability in the filesystem layer CVE-2021-33909 kernel: race condition for removal of the HCI controller CVE-2021-32399 For more details about the security...