Fresh IT Vulnerabilities @vulnbot@schleuss.online

#introductions This bot is posting IT vulnerabilities from all over the web - usually refreshes every few minutes with new stories. If you would like to see more sites included, write to the maintainer @emanuel - you might also be interested in @itsecbot

CVE-2020-27242 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27242

CVE-2020-27244 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27244

CVE-2020-27245 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27245

CVE-2020-27246 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27246

CVE-2020-27243 - An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of Ope... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27243

CVE-2021-30174 - RiyaLab CloudISO event item is added, special characters in specific field of time manage... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-30174

CVE-2021-32544 - Special characters of IGT search function in igt+ are not filtered in specific fields, wh... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32544

CVE-2021-32563 - An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called wit... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32563

SEC Consult SA-20210511-0 :: Cross-site Scripting Vulnerabilities in REWE GO - Posted by SEC Consult Vulnerability Lab on May 10SEC Consult Vulnerability Lab Security A... - http://seclists.org/fulldisclosure/2021/May/20

CVE-2020-23373 - Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows r... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-23373

CVE-2020-23369 - In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribut... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-23369

CVE-2020-23371 - Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-23371

CVE-2020-23575 - A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successf... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-23575

CVE-2020-23374 - Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allo... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-23374

CVE-2020-23370 - In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/control... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-23370

CVE-2020-23376 - NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstr... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-23376

CVE-2021-32399 - net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for r... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32399

CVE-2021-32489 - An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell throug... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32489

CVE-2021-32053 - JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access ... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32053

CVE-2020-28600 - An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionali... - https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-28600