All Posts by: Virtual Patching

Xiuno BBS 4.0.4 installinstall.sql doctype cross site scripting

A vulnerability classified as problematic has been found in Xiuno BBS 4.0.4. Affected is an unknown function of the file

Common Vulnerabilities and Exposures

Xiuno BBS 4.0.4 /admin/ sitename cross site scripting

A vulnerability classified as problematic was found in Xiuno BBS 4.0.4. Affected by this vulnerability is an unknown functionality of

Common Vulnerabilities and Exposures

Xiuno BBS 4.0.4 /admin/ sitebrief cross site scripting

A vulnerability, which was classified as problematic, has been found in Xiuno BBS 4.0.4. Affected by this issue is some

Common Vulnerabilities and Exposures

Maccms 10 type_en cross site scripting

A vulnerability, which was classified as problematic, was found in Maccms 10. This affects an unknown part. There is no

Common Vulnerabilities and Exposures

Apache HTTP Server 2.4.49 Path Normalization path traversal

A vulnerability has been found in Apache HTTP Server 2.4.49 (Web Server) and classified as critical. This vulnerability affects an

Common Vulnerabilities and Exposures

Apache HTTP Server 2.4.49 HTTP2 Request null pointer dereference

A vulnerability was found in Apache HTTP Server 2.4.49 (Web Server) and classified as problematic. This issue affects an unknown

Common Vulnerabilities and Exposures

Akamai Technologies EAA up to 2.3.0/2.4.0/2.5.2 unquoted search path

A vulnerability classified as critical was found in Akamai Technologies EAA up to 2.3.0/2.4.0/2.5.2. Affected by this vulnerability is an

Common Vulnerabilities and Exposures

ACINQ Eclair up to 0.6.2 Privilege Escalation [CVE-2021-41591]

A vulnerability, which was classified as problematic, has been found in ACINQ Eclair up to 0.6.2. Upgrading to version 0.6.3

Common Vulnerabilities and Exposures

Blockstream c-lightning up to 0.10.1 Privilege Escalation [CVE-2021-41592]

A vulnerability, which was classified as problematic, was found in Blockstream c-lightning up to 0.10.1. There is no information about

Common Vulnerabilities and Exposures

Lightning Labs lnd up to 0.13.2 Privilege Escalation [CVE-2021-41593]

A vulnerability has been found in Lightning Labs lnd up to 0.13.2 and classified as problematic. Upgrading to version 0.13.3-beta

Common Vulnerabilities and Exposures

Bosch Rexroth IndraMotion MLC/Rexroth IndraLogic XLC authentication replay

A vulnerability was found in Bosch Rexroth IndraMotion MLC and Rexroth IndraLogic XLC (unknown version) and classified as critical. This

Common Vulnerabilities and Exposures

Boston Scientific Zoom Latitude Model 3120 Programmer Installation Utility improper validation of integrity check value

A vulnerability was found in Boston Scientific Zoom Latitude Model 3120 (version unknown). It has been classified as problematic. Affected

Common Vulnerabilities and Exposures

Hiredis RESP calloc integer overflow

A vulnerability was found in Hiredis (affected version unknown). It has been declared as critical. Affected by this vulnerability is

Common Vulnerabilities and Exposures

Survey Solutions 21.09.1 Headquarters Application Endpoint /metrics information disclosure

A vulnerability was found in Survey Solutions 21.09.1 (Survey Software). It has been rated as problematic. Affected by this issue

Common Vulnerabilities and Exposures

GCLib 0.12.7 GFF File gff.cpp GffLine::GffLine out-of-bounds read

A vulnerability classified as problematic has been found in GCLib 0.12.7. This affects the function GffLine::GffLine of the file gff.cpp

Common Vulnerabilities and Exposures

53KF up to 2.0.0.1 Chat Window cross site scripting

A vulnerability classified as problematic was found in 53KF up to 2.0.0.1. This vulnerability affects some unknown processing of the

Common Vulnerabilities and Exposures

GitLab Enterprise Edition 13.5 Merge Request Creation Page cross site scripting

A vulnerability, which was classified as problematic, has been found in GitLab Enterprise Edition 13.5 (Bug Tracking Software). This issue

Common Vulnerabilities and Exposures

Bosch Rexroth IndraMotion MLC/Rexroth IndraLogic XLC URL cross site scripting

A vulnerability, which was classified as problematic, was found in Bosch Rexroth IndraMotion MLC and Rexroth IndraLogic XLC (version unknown).

Common Vulnerabilities and Exposures

GitHub Community Edition/Enterprise Edition Error Response Privilege Escalation

A vulnerability was found in GitHub Community Edition and Enterprise Edition (Bug Tracking Software) (the affected version unknown). It has

Common Vulnerabilities and Exposures

GitHub Community Edition/Enterprise Edition 7.11.0 Two-factor Authentication missing authentication

A vulnerability was found in GitHub Community Edition and Enterprise Edition 7.11.0 (Bug Tracking Software). It has been declared as

Common Vulnerabilities and Exposures

GFOS Workforce Management 4.8.272.1 Login Page improper authentication

A vulnerability was found in GFOS Workforce Management 4.8.272.1. It has been classified as critical. Affected is an unknown code

Common Vulnerabilities and Exposures

DynamicPageList3 Extension up to 3.3.5 on MediaWiki DPL Parser resource consumption

A vulnerability was found in DynamicPageList3 Extension up to 3.3.5 on MediaWiki. It has been declared as problematic. Affected by

Common Vulnerabilities and Exposures

mySCADA myDESIGNER up to 8.20.0 Project File Import pathname traversal

A vulnerability was found in mySCADA myDESIGNER up to 8.20.0 (SCADA Software). It has been rated as critical. Affected by

Common Vulnerabilities and Exposures

LCDS LAquis SCADA up to 4.3.1.1085 els Project File path traversal

A vulnerability classified as critical has been found in LCDS LAquis SCADA up to 4.3.1.1085 (SCADA Software). This affects an