#Apache directory studio fix java path Patch#
The original patch issued under this CVE ID is insufficient, please review remediation information under CVE-2021-42013.Īpache HTTP Server Privilege Escalation VulnerabilityĪpache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.Īpache Shiro Code Execution VulnerabilityĪpache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspecified request parameter when a cipher key has not been configured for the "remember me" feature.Īpache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability This CVE ID resolves an incomplete patch for CVE-2021-41773.Īpache HTTP Server contains a path traversal vulnerability which allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default �require all denied� or if CGI scripts are enabled. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain "AbstractEmu."Īpache Struts Deserialization of Untrusted Data VulnerabilityĪpache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to remote code execution when deserializing XML payloads.Īpache HTTP Server Path Traversal VulnerabilityĪpache HTTP Server contains a path traversal vulnerability which allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default �require all denied� or if CGI scripts are enabled. This causes an out-of-bounds write leading to privilege escalation.
#Apache directory studio fix java path drivers#
Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."
This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."Īndroid Kernel Out-of-Bounds Write VulnerabilityĪndroid Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. The impacted product is end-of-life and should be disconnected if still in use.Īmcrest Cameras and NVR Stack-based Buffer Overflow VulnerabilityĪmcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.Īndroid Kernel Use-After-Free VulnerabilityĪndroid Kernel contains a use-after-free vulnerability in binder.c which allows for privilege escalation from an application to the Linux Kernel. Accellion FTA OS Command Injection VulnerabilityĪccellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.Īccellion FTA contains an OS command injection vulnerability exploited via a local web service call.Īccellion FTA SQL Injection VulnerabilityĪccellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.Īccellion FTA Server-Side Request Forgery (SSRF) VulnerabilityĪccellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.Īdobe Acrobat and Reader Heap-based Buffer Overflow VulnerabilityĪcrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.Īdobe Acrobat and Reader Use-After-Free VulnerabilityĪdobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.Īdobe ColdFusion Deserialization of Untrusted Data VulnerabilityĪdobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.Īdobe ColdFusion Unrestricted File Upload VulnerabilityĪdobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution.Īdobe Flash Player Use-After-Free VulnerabilityĪdobe Flash Player contains a use-after-free vulnerability that could allow for code execution.
0 kommentar(er)
