8482 matches found
SUSE-SU-2021:0284-1 Security update for openvswitch
This update for openvswitch fixes the following issues: - openvswitch was updated to 2.7.12 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 A lot more minor bugs have been fixed with this openvswitch version. Please refer to the changelog of the openvswitch.rpm file in...
PT-2021-11705 · Harbor · Harbor
Name of the Vulnerable Software and Affected Versions: Harbor versions 2.0 through 2.0.4 Harbor versions 2.1.x through 2.1.1 Description: The catalog's registry API is exposed on an unauthenticated path, allowing bypass of authorization. The vulnerable API endpoint is "GET /v2/ catalog/" which ca...
MISP cross-site scripting vulnerability (CNVD-2021-07507)
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.128. The vulnerability ste...
Vmware Spring Cloud Data Flow SQL Injection Vulnerability
Vmware Spring Cloud Data Flow is a code library for streaming and batch data processing in microservices from Vmware, Inc. A SQL injection vulnerability exists in Spring Cloud Data Flow versions 2.6.x prior to 2.6.5, versions 2.5.x prior to 2.5.4, which stems from the vulnerability of the...
SUSE-SU-2021:0200-1 Security update for hawk2
This update for hawk2 fixes the following issues: hawk2 was updated to version 2.4.0+git.1611141202.2fe6369e. Security issue fixed: - Fixed another possible code execution vulnerability in the controller code bsc1179998...
MedinTux Cross-Site Scripting Vulnerability
MedinTux is a Mysql-based medical record management software from the MedinTux community. A security vulnerability exists in Medintux v2.16.000 CCAM.php, which can be exploited by attackers to perform malicious actions...
Dnsmasq Security Vulnerability
DNSmasq is a DNS configuration tool from the individual developer Simon Kelley. A security vulnerability exists in dnsmasq prior to version 2.83, which can be exploited by an attacker to crash the target service...
MantisBT Security Vulnerabilities
MantisBT is MantisBT Mantisbt team of a Web-based open source defect tracking system . The system provides project management and defect tracking services in the form of Web operations. MantisBT before 2.4.1 A security vulnerability exists that can be exploited by attackers to gain access to...
UBUNTU-CVE-2021-23926
The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0...
flatCore Information Disclosure Vulnerability
flatCore is a lightweight content management system CMS based on PHP and SQLite. An information disclosure vulnerability exists in flatCore CMS prior to version 2.0.0 build 139, which stems from a local file disclosure vulnerability found in the program's docsfile acp interface's HTTP request bod...
CVE-2020-4595
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184819...
dotnet: ASP.NET Core Callbacks outside of locks cause Krestel deadlock when using HTTP2
A flaw was found in dotnet. Running callbacks outside of locks results in Krestel deadlock using HTTP2. The highest threat from this vulnerability is to system availability...
IBM Security Guardium Insights 信息泄露漏洞
IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.2. A remote attacker could exploit this...
CVE-2021-3134
Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...
SQL Injection Vulnerability in yycms Movie & TV System V2.3 Admin Catalog yy***_km***.php
yycms is a movie and television system. yycms film and television system V2.3 version admin directory yykm.php SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
北京坤豆 Mubu 授权问题漏洞
Mubu is a platform for online writing from Mubu, a company based in Beijing, China. An authorization issue vulnerability exists in Mubu version 2.2.1, which stems from its failure to strictly limit user privileges and can be exploited by a local attacker to execute system commands...
Microsoft Windows WalletService Access Control Error Vulnerability
Microsoft Windows WalletService is an application from Microsoft Corporation USA. hosts objects used by the Wallet Client. An access control error vulnerability exists in Microsoft Windows WalletService. The following products and versions are affected:Windows 10 Version 1607 for x64-based...
CVE-2021-3011
An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...
There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
...