Archive
January 2021
Vulnerabilities first published in this month (UTC), newest first.
81 results · Clear filters · Feed
-
Unscored —
TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic cl…
-
High 8.8
Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possib…
-
High 7.8CVE-2021-3347 Public exploit
An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault…
-
Unscored —CVE-2021-3345 Public exploit
_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the diges…
-
Unscored —CVE-2021-3298 Public exploit
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit…
-
Unscored —
The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading r…
-
Unscored —
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequent…
-
Unscored —CVE-2020-25782 Public exploit
An issue was discovered on Accfly Wireless Security IR Camera 720P System with software versions v3.10.73 through v4.15…
-
Unscored —CVE-2021-3318 Public exploit
attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.
-
Unscored —
KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of…
-
High 8.2CVE-2020-4949 Public exploit
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack …
-
High 7.2
Zen Cart vulnerable to authenticated remote code execution
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.
-
High 7.8
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…
KEV Apr 6, 2022 -
Unscored —
Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection…
-
Unscored —
A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 20121…
-
Unscored —CVE-2021-3186 Public exploit
A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_…
-
Unscored —CVE-2020-23160 Public exploit
Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers t…
-
High 7.5CVE-2020-8570 Public exploit
Kubernetes Java client libraries unvalidated path traversal in Copy implementation
Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any f…
-
Medium 6.3CVE-2020-8554 Public exploit
Kubernetes man in the middle using LoadBalancer or ExternalIPs
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a pri…
-
Unscored —CVE-2020-28874 Public exploit
reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect busines…
-
Medium 6.5CVE-2021-21239 Public exploit
Open default xmlsec1 key-type preference
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. Users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML d…
-
Unscored —CVE-2020-11179 Public exploit
Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race conditi…
-
Unscored —CVE-2021-3164 Public exploit
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permi…
-
Unscored —CVE-2020-25686 Public exploit
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending…
-
Unscored —CVE-2021-3130 Public exploit
Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP…
-
Medium 6.0CVE-2021-2119 Public exploit
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
High 7.2
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…
-
Critical 9.8CVE-2021-1994 Public exploit
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…
-
Critical 9.8
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versi…
-
Unscored —
Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a fi…
-
Unscored —CVE-2020-28707 Public exploit
The Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site Scripting (XSS) via stockdio_…
-
Unscored —
A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.
-
Unscored —CVE-2020-23522 Public exploit
Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.
-
High 7.5
-
Unscored —CVE-2021-3166 Public exploit
An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a fir…
-
Unscored —
Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin …
-
Medium 6.1CVE-2020-27219 Public exploit
Cross-site Scripting in Eclipse Hawkbit
In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from …
-
Unscored —CVE-2020-27368 Public exploit
Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /i…
-
Unscored —CVE-2020-26733 Public exploit
Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16…
-
Unscored —CVE-2021-3138 Public exploit
In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms.