WordPress RingCentral Communications 1.6.8 Authentication Bypass

WordPress RingCentral Communications plugin versions 1.5 through 1.6.8 have a missing server-side verification that allows for authentication bypass...

OpenFGA 安全漏洞

OpenFGA is OpenFGA's high performance and flexible authorization/licensing engine built for developers and inspired by Google Zanzibar. A security vulnerability exists in OpenFGA versions prior to 1.5.0 to 1.5.3 that stems from an authorization bypass vulnerability when a user calls the Check or...

be.fluid-it.tools.rundeck.plugins:rundeck-httppost-plugin (=0.1-1), com.criteo.rundeck.plugin:rundeck-tag-orchestrator-plugin (=1.3.3) +4 more potentially affected by CVE-2021-39133 via org.rundeck:rundeck-core (>=1.5 <=2.5.2)

org.rundeck:rundeck-core MAVEN version =1.5, =1.0.0, =1, =1.1, =1.3.3 - org.rundeck:rundeckapp =1.5 Source cves: CVE-2021-39133 Source advisory: OSV:GHSA-3JMW-C69H-426C...

RaspAP 安全漏洞

RaspAP is a simple wireless AP setup and management for Debian-based devices. A security vulnerability exists in RaspAP, which stems from multiple elevation of privilege vulnerabilities in RaspAP from version 1.5 to 2.6.5 that could allow a remote, authenticated attacker to inject arbitrary...

ALPINE-CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

DEBIAN-CVE-2014-4344

The accctxcont function in the SPNEGO acceptor in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 aka krb5 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty continuation token at a certain point...

DEBIAN-CVE-2010-2799

Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments...