Archive
January 2021
Vulnerabilities first published in this month (UTC), newest first.
1,527 results · Feed
-
Unscored —
A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where …
-
Unscored —
A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arb…
-
Medium 5.4
Incorrect Authorization in keycloak
A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.
-
Medium 5.3
Moodle Client side denial of service via personal message
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages.
-
Unscored —
Mobile application "Testes de Codigo" v11.3 and prior allows stored XSS by injecting a payload in the "feedback" messag…
-
Medium 4.3
Moodle Grade information disclosure in grade's external fetch functions
It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades.
-
Medium 5.4
Moodle Cross-site Scripting
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS.
-
Medium 5.4
Moodle Vulnerable to Reflected Cross-site Scripting
It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.
-
High 7.2
Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.
-
Medium 5.4
Electron vulnerable to ID collision when routing IPC messages to renderers containing OOPIFs
The Electron framework lets users write cross-platform desktop applications using JavaScript, HTML and CSS. In versions of Electron IPC prior to 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9, messages sent from the main process to a subframe in the renderer proces…
-
Unscored —CVE-2021-22875 EPSS 18%
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the `setPerPage` parameter.
-
Unscored —CVE-2021-22874 EPSS 18%
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset…
-
Medium 6.3CVE-2020-4888 EPSS 62%
IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary co…
-
High 8.1
IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, c…
-
High 8.8
A cross-site request forgery vulnerability exists in the GACL functionality of OpenEMR 5.0.2 and development version 6.…
-
Unscored —
Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 fi…
-
Unscored —
Logstorage version 8.0.0 and earlier, and ELC Analytics version 3.0.0 and earlier allow remote attackers to execute arb…
-
Unscored —
Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an …
-
Critical —
XSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic
A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of asset downloads.
-
Unscored —
An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15…
-
Unscored —
An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15…
-
Unscored —
An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15…
-
Unscored —CVE-2020-25782 Public exploit
An issue was discovered on Accfly Wireless Security IR Camera 720P System with software versions v3.10.73 through v4.15…
-
Unscored —
Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal th…
-
Unscored —
WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted U…
-
Medium 5.3
Improper Control of Dynamically-Managed Code Resources in config-shield
scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with …
-
Unscored —
A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacke…
-
Unscored —
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft spec…
-
Unscored —
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft spec…
-
Unscored —
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft spec…
-
Unscored —
Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, al…
-
Unscored —
Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an…
-
Unscored —
An uninitialized pointer issue has been identified in the way the application processes project files, allowing an atta…
-
Unscored —
A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an …
-
Unscored —
Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing a…
-
Unscored —
Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installatio…
-
High 7.5
Flaw in ActiveMQ Artemis OpenWire support
While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject t…
-
Unscored —
This module enables you to add groups to other groups in a tree structure where access can be inherited up or down the …
-
Medium 5.1
Possibility of SQL Injection in Spring Cloud Task Execution Sorting Query
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.