Archive
26 January 2021
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Critical 9.8
OS Command Injection in ftpd
The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic.
-
Unscored —
SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI.
-
Unscored —
KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of…
-
High 7.1
NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a …
-
Medium 5.6
NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior …
-
Unscored —
A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this v…
-
Unscored —
A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be execut…
-
Medium 6.5
Denial of service in TenderMint Core
Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Tendermint Core v0.34.0 introduced a new way of handling evi…
-
Medium 5.4
XSS in Flarum Sticky extension.
Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vulnerability. A change in release beta 14 of the Sticky extension caused the plain text content of th…
-
Medium 6.5
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).
-
Medium 6.5
CKEditor 4 ReDoS Vulnerability
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).
-
High 8.6
Risk of code injection in RSSHub
RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code injection. Some routes use `eval` or `Function constructor`, which may be injected by the target site …
-
Unscored —
packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by …
-
Unscored —
An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through …
-
Unscored —
Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Manageme…
-
Unscored —
The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-ser…
-
Unscored —
The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory wi…
-
Unscored —
The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensiti…
-
Unscored —
Some parsing functions in the affected product do not check the return value of malloc and the thread handling the mess…
-
High 8.6
A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially craft…
-
Medium 4.6
TIBCO BPM Cross Site Scripting (XSS)
The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execu…
-
Unscored —
EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arb…
-
Unscored —
newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexCo…
-
Unscored —
newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterce…
-
Unscored —
newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their …
-
Unscored —
A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the passwor…
-
Unscored —
A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in w…
-
High 8.2CVE-2020-4949 Public exploit
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack …
-
Medium 4.0
IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact supp…
-
High 8.8
Improper Privilege Management in Apache Hadoop
In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.
-
Unscored —
TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, al…
-
Unscored —
A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an att…
-
Unscored —
An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allo…
-
Unscored —
Reolink P2P Cameras
The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.
-
Unscored —
Reolink P2P Cameras
An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access
-
Medium 5.8
Cache Manipulation Attack in Apache Traffic Control
When ORT (now via atstccfg) generates ip_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0, those files include permissions that allow bad actors to push arbitrary content into and remove arbitrary content from CDN cache servers. …
-
Medium 5.3
Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins
Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.
-
Unscored —CVE-2021-3297 EPSS 21%
On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.
-
High 7.5
Path Traversal in node-red-contrib-huemagic
node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.
-
Unscored —
Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account.