CVE-2021-27371

The Contact page in Monica 2.19.1 allows stored XSS via the Description field...

AZL-44961 CVE-2021-24115 affecting package botan2 2.14.0-2

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

Monica 跨站脚本漏洞

Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Last Name field...

Multiple Intel Server System Product Buffer Error Vulnerabilities

Intel Server System is a server array card from Intel Corporation USA. A buffer error vulnerability exists in multiple Intel Server System products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting...

CVE-2020-12377

Insufficient input validation in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

Phpgurukul PHPGurukul Car Rental Projec Code Issue Vulnerability

Phpgurukul PHPGurukul Car Rental Projec is an application of the American company PHPGurukul Car Rental Projec Phpgurukul. It provides car rental services. A code issue vulnerability exists in PHPGurukul Car Rental Project version 2.0, which stems from a remote shell upload vulnerability in...

PT-2021-17143 · Unknown · Phpgurukul Car Rental Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Project version 2.0 Description: The issue is related to a remote shell upload vulnerability. This vulnerability is present in the changeimage1.php file, allowing for potential malicious activity. Recommendations: For...

Vulnerabilities fixed in OpenSSL

Vulnerabilities have been fixed in OpenSSL. The vulnerabilities allow a malicious party to remotely initiate a denial-of-service by offering a rogue certificate to to an SSL server or SSL client. When an SSL server still supports SSLv2, it is possible to inadvertently establish a connection and...

ALPINE-CVE-2021-23839

OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater th...

CVE-2021-20987

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery...

CVE-2020-35560

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unauthenticated open redirect in the redirect.php...

The vulnerability of the HTTP/2 mechanism implemented in the Apache HTTP Server allows attackers to cause service failures or lead to incorrect server configurations.

The vulnerability of the HTTP/2 web server implementation in the Apache HTTP Server is related to inconsistent interpretation of http requests. Exploiting this vulnerability can allow a malicious actor to cause service failures or lead to incorrect server configuration...

SUSE-SU-2021:0449-1 Security update for perl-File-Path

This update for perl-File-Path fixes the following issues: - Provide File::Path version 2.15 to SLE-12-SP5 jscSLE-17088, jscECO-3050 - CVE-2017-6512: fix a race condition in the File-Path module for Perl...

tomcat: Apache Tomcat HTTP/2 Request mix-up

A flaw was found in Apache Tomcat. If an HTTP/2 client exceeded the agreed maximum number of concurrent streams for a connection in violation of the HTTP/2 protocol, it is possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - fro...

PT-2021-3357 · 3Mf Consortium +2 · Lib3Mf +2

Name of the Vulnerable Software and Affected Versions: 3MF Consortium lib3mf version 2.0.0 Description: A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP functionality. This issue is related to the use of memory after it has been freed. Exploitation of this...

CVE-2020-24685

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...

PT-2021-2951 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to a lack of protection for SQL query structures in the Magento Commerce platform, which can be...

ABB Asea Brown Boveri Ltd ABB AC500 V2 Security Breach

ABB Asea Brown Boveri Ltd ABB AC500 V2 is a PLC from ABB Asea Brown Boveri Ltd, Sweden.Suitable for simple control tasks and complex automation solutions. ABB AC500 V2 products with onboard Ethernet version 2.8.4 and prior versions contain a security vulnerability that can be exploited by an...

CVE-2021-21304

Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used throughout the codebase for various operations...

marked 资源管理错误漏洞

marked is the United States Christopher Jeffrey personal developer of a Markdown parser and compiler written in JavaScript . A resource management error vulnerability exists in Marked versions 1.1.1 and prior to 2.0.0, which can affect any user who runs user-generated code through Marked. No...