Archive
January 2021
Vulnerabilities first published in this month (UTC), newest first.
1,527 results · Feed
-
High 8.6
Risk of code injection in RSSHub
RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code injection. Some routes use `eval` or `Function constructor`, which may be injected by the target site …
-
Unscored —
packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by …
-
Unscored —
An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through …
-
Unscored —
Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Manageme…
-
Unscored —
The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-ser…
-
Unscored —
The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory wi…
-
Unscored —
The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensiti…
-
Unscored —
Some parsing functions in the affected product do not check the return value of malloc and the thread handling the mess…
-
High 8.6
A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially craft…
-
Medium 4.6
TIBCO BPM Cross Site Scripting (XSS)
The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execu…
-
Unscored —
EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arb…
-
Unscored —
newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexCo…
-
Unscored —
newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterce…
-
Unscored —
newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their …
-
Unscored —
A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the passwor…
-
Unscored —
A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in w…
-
High 8.2CVE-2020-4949 Public exploit
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack …
-
Medium 4.0
IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact supp…
-
High 8.8
Improper Privilege Management in Apache Hadoop
In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.
-
Unscored —
TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, al…
-
Unscored —
A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an att…
-
Unscored —
An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allo…
-
Unscored —
Reolink P2P Cameras
The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.
-
Unscored —
Reolink P2P Cameras
An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access
-
Medium 5.8
Cache Manipulation Attack in Apache Traffic Control
When ORT (now via atstccfg) generates ip_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0, those files include permissions that allow bad actors to push arbitrary content into and remove arbitrary content from CDN cache servers. …
-
Medium 5.3
Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins
Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.
-
Unscored —
On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.
-
High 7.5CVE-2021-25864 Scanner template
Path Traversal in node-red-contrib-huemagic
node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.
-
Unscored —
Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account.
-
Unscored —
A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote at…
-
High 7.2
Zen Cart vulnerable to authenticated remote code execution
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.
-
Unscored —
Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI.
-
High —
Path traversal in Node-RED-Dashboard
Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
-
Unscored —
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).
-
Unscored —
cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579).
-
Unscored —
Incorrect operations on the P-224 curve in crypto/elliptic
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
-
Unscored —
Arbitrary code injection via the go command with cgo on Windows in cmd/go
Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download).
-
Unscored —
An issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.…
-
Unscored —
An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allo…
-
Unscored —
An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote a…