4280 matches found
CVE-2021-3058
creationtimestamp| type| source ---|---|--- 2021-11-10 20:36:53+00:00| seen| https://t.me/cibsecurity/32200...
CVE-2021-24695
The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to download and read the logs containing Sensitive Information such as IP Addresses and Usernames...
CVE-2021-42372
creationtimestamp| type| source ---|---|--- 2021-11-08 07:28:40+00:00| seen| https://t.me/cibsecurity/31953...
CVE-2021-41216
creationtimestamp| type| source ---|---|--- 2021-11-06 01:26:14+00:00| seen| https://t.me/cibsecurity/31922...
CVE-2021-41023
creationtimestamp| type| source ---|---|--- 2021-11-02 21:23:21+00:00| seen| https://t.me/cibsecurity/31631...
CVE-2021-42557
In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials...
CVE-2020-36503
creationtimestamp| type| source ---|---|--- 2021-11-01 11:21:21+00:00| seen| https://t.me/cibsecurity/31537...
CVE-2021-22455
creationtimestamp| type| source ---|---|--- 2021-10-28 16:23:25+00:00| seen| https://t.me/cibsecurity/31374...
CVE-2021-22457
creationtimestamp| type| source ---|---|--- 2021-10-28 16:23:21+00:00| seen| https://t.me/cibsecurity/31373...
CVE-2021-20526
creationtimestamp| type| source ---|---|--- 2021-10-27 20:16:18+00:00| seen| https://t.me/cibsecurity/31290...
CVE-2021-42169
creationtimestamp| type| source ---|---|--- 2021-10-22 18:39:28+00:00| seen| https://t.me/cibsecurity/31047...
PT-2021-22149 · Auvesy · Versiondog
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a database connection to a server through a specific API, potentially allowing an unprivileged user to gain SYSDBA permissions. No...
CVE-2021-39127
creationtimestamp| type| source ---|---|--- 2021-10-21 07:36:26+00:00| seen| https://t.me/cibsecurity/30934...
CVE-2021-35666
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: OSSL Module. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP Server. Successful...
Security Advisory - CSV Injection Vulnerability in Some Huawei Products
There is a CSV injection vulnerability in some Huawei Products. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files ...
CVE-2021-31382
creationtimestamp| type| source ---|---|--- 2021-10-19 22:39:26+00:00| seen| https://t.me/cibsecurity/30834...
CVE-2021-39338
creationtimestamp| type| source ---|---|--- 2021-10-15 16:28:50+00:00| seen| https://t.me/cibsecurity/30617...
OESA-2021-1384 tpm2-tools security update
The package contains the code for the TPM Trusted Platform Module 2.0 tools based on tpm2-tss. The tpm2-tools projects aims to deliver both low-level and aggregate command line tools that provide access to a tpm2.0 compatible device. Security Fixes: A flaw was found in tpm2-tools in versions befo...
