Archive
January 2021
Vulnerabilities first published in this month (UTC), newest first.
1,527 results · Feed
-
Medium 5.3
Insecure Defaults
The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.
-
High 8.0
D-Link DCS-5220 devices have a buffer overflow. NOTE: This vulnerability only affects products that are no longer suppo…
-
Unscored —
rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending…
-
Unscored —
A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.
-
Critical 9.0
Mautic stored Cross-site Scripting (XSS)
Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an externally crafted JavaScript file, an attacker could eventu…
-
Critical 9.0
Mautic stored Cross-site Scripting (XSS)
Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could load an externally drafted JavaScript file that would allow…
-
Unscored —
Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 20…
-
Unscored —CVE-2020-23522 Public exploit
Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.
-
High 7.3
Prototype Pollution
This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the ap…
-
High 7.5
-
High 7.5
-
High 8.8
HGiga OAKloud Portal - SQL injection -2
HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (online registration) to obtain database schema and data.
-
Medium 5.3
HGiga OAKloud Portal - Security Misconfiguration
HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions.
-
Critical 9.8
HGiga OAKloud Portal - SQL injection -1
HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (document management page) to obtain database schema and data.
-
Unscored —
fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, al…
-
Unscored —
Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an…
-
Unscored —
Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact the application's ava…
-
Unscored —
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in v…
-
Unscored —
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL…
-
Critical 9.8CVE-2021-3177 EPSS 24%
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code exec…
-
High 7.5
Directory Traversal in Archive_Tar
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
KEV Aug 25, 2022 -
Unscored —
An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the …
-
Medium 5.5
Improper Authorization vulnerability in MA
Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detectio…
-
Medium 6.8
Web Cache Poisoning
The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the req…
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vu…
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists w…
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when render…
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when ren…
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when renderi…
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerabilit…
-
Unscored —CVE-2021-25294 EPSS 11%
OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This oc…
-
Unscored —
OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues.
-
Unscored —CVE-2021-3166 Public exploit
An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a fir…
-
Unscored —
Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct O…
-
Unscored —
An issue was discovered in Quali CloudShell 9.3. An XSS vulnerability in the login page allows an attacker to craft a U…
-
Unscored —
Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session…
-
Unscored —
An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged a…
-
Unscored —
Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation.
-
Critical 10.0
Pre-Auth Arbitrary File Upload
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet also saves user controlled data (`request.getInputStream()`) to a user specified location (`request.getHeader("File-Name")`). This issue may lead to arbitrary fil…
-
High 8.6
Pre-Auth Access token leak
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the REST UserResource endpoint performs a security check to make sure that only administrators can list user details. However for the `/users/{id}` endpoint there are no security checks …