Archive
January 2021
Vulnerabilities first published in this month (UTC), newest first.
1,527 results · Feed
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted source…
-
Unscored —
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in th…
-
High 7.8
ClusterLabs crmsh vulnerable to shell code injection
An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.
-
Unscored —
Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remot…
-
Unscored —
Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could a…
-
Unscored —
The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user…
-
Unscored —
An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the haw…
-
Medium 6.5
In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoint…
-
Unscored —
REDCap 10.3.4 contains a XSS vulnerability in the ToDoList function with parameter sort. The information submitted by t…
-
Unscored —
REDCap 10.3.4 contains a SQL injection vulnerability in the ToDoList function via sort parameter. The application uses …
-
Critical 9.8
Unauthenticated remote code execution in Ignition
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Larave…
KEV Sep 18, 2023 -
Unscored —
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and e…
-
Medium 5.4
Pillow Out-of-bounds Read
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.
-
High 8.8
Pillow Out-of-bounds Write
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
-
High 7.1
Pillow Out-of-bounds Read
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.
-
Unscored —CVE-2020-24701 Scanner template
OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI).
-
Unscored —
OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autocon…
-
Unscored —
SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to S…
-
Unscored —
Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x th…
-
Unscored —
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5)…
-
Unscored —
A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch f…
-
Unscored —
The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead t…
-
Unscored —
The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existe…
-
Unscored —
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Unscored —CVE-2021-0313 Public exploit
In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input valid…
-
Unscored —
In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could …
-
Unscored —
In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is …
-
Unscored —
In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a miss…
-
Unscored —
In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. Thi…
-
Unscored —
In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen…
-
Unscored —CVE-2021-0315 Public exploit
In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app ac…
-
Unscored —CVE-2020-0471 Public exploit
In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetoo…
-
Unscored —CVE-2021-0316 Public exploit
In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
Unscored —
In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. Th…
-
Unscored —CVE-2021-0318 Public exploit
In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-f…
-
Unscored —CVE-2021-0319 Public exploit
In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth devic…