Archive
February 2021
Vulnerabilities first published in this month (UTC), newest first.
1,464 results · Feed
-
Unscored —
project abandoned; migrate to the `aes-siv` crate
The Miscreant project has been abandoned and archived. The Rust implementation has been adapted into the new `aes-siv` crate which implements both the AES-CMAC-SIV and AES-PMAC-SIV constructions: <https://github.com/RustCrypto/AEADs/tree/master/aes-siv> Pleas…
-
Unscored —CVE-2021-27132 EPSS 16%
SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function vi…
-
Unscored —
An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker ca…
-
Unscored —
An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access t…
-
Unscored —
An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipul…
-
Unscored —
An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-even…
-
Unscored —
i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated atta…
-
Unscored —
UNKNOWN READ in std::pair<absl::lts_NUMBER_02_25::container_internal::raw_hash_set<absl::lts_NUM
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31393 ``` Crash type: UNKNOWN READ Crash state: std::pair<absl::lts_NUMBER_02_25::container_internal::raw_hash_set<absl::lts_NUM tensorflow::SparseCount<long, long>::Compute tensorflow::Ke…
-
High 7.4
SaltStack Salt Improper SSL Certificate Validation
In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.
-
High 7.8CVE-2020-28243 Public exploit
SaltStack Salt command injection via a crafted process name
An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blackliste…
-
Medium 5.9
SaltStack Salt Improper Certificate Validation
In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.
-
Critical 9.8CVE-2021-3197 EPSS 72%
SaltStack Salt is vulnerable to shell injection via ProxyCommand argument
An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.
-
Critical 9.1
SaltStack Salt eauth tokens can be used once after expiration
In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to run command against the salt master or minions.)
-
Critical 9.8
SaltStack Salt command injection in the Salt-API when using the Salt-SSH client
An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.p…
-
Critical 9.8CVE-2021-25283 EPSS 10%
SaltStack Salt Server Side Template Injection
An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks.
-
Medium 4.4
SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.
-
Critical 9.8
SaltStack Salt Improper Authentication vulnerability
An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.
-
Critical 9.1
SaltStack Salt Directory Traversal vulnerability
An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.
-
Unscored —
An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occu…
-
Unscored —CVE-2020-36079 Public exploit
Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attack…
-
High 7.5
A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision…
-
Medium 5.2
DOS vulnerability for Quoted Quality CSV headers
In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due…
-
Medium 5.4
Integer overflow on 32-bit systems
Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 o…
-
High 8.3
Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) bef…
-
Unscored —
Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute a…
-
High 8.3
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) befor…
-
High 8.2
Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 al…
-
High 8.3
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) befor…
-
Critical 9.0
Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-2542…
-
Critical 9.0
Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allo…
-
Critical 9.0
Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DS…
-
Unscored —
ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reacha…
-
Unscored —
In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Unscored —
In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Unscored —
In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Unscored —
In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation …
-
Unscored —
In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local info…
-
Unscored —
In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local …
-
Unscored —
In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local …
-
Unscored —
In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…