Archive
9 February 2021
Vulnerabilities first published on this day (UTC), newest first.
145 results · Feed
-
Critical 9.8
Out of bounds write in calamine
An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation,…
-
High 7.5
Use of Uninitialized Resource in ms3d
An issue was discovered in the ms3d crate before 0.1.3 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via IoReader::read.
-
Medium 5.3
insert_slice_clone can double drop if Clone panics.
An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insert_slice_clone can perform a double drop.
-
Critical 9.8
Out of bounds read in xcb
An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name() calls std::str::from_utf8_unchecked() on unvalidated bytes from an X server.
-
Unscored —
An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because there is an …
-
Unscored —
An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutatio…
-
Unscored —
An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from a…
-
High 7.5
Read on uninitialized buffer in postscript
An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation.
-
Critical 9.6
Mautic is vulnerable to XSS vulnerability
A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mautic[return] (a different attack method than CVE-2020-35124, but also related to the Referer concept).
-
Critical 9.8
Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user o…
-
Medium 5.3
Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneo…
-
Medium 5.5
Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the…
-
High 7.0
Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 contain an Incorrect Permission Assignment for a Critical Resource v…
-
High 7.8
Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with ei…
-
High 7.8
Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the IS…
-
High 7.8
Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISI_PRIV_JOB…
-
High 8.1CVE-2021-21479 EPSS 10%
Remote Code Execution in SCIMono
In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.
-
Medium 4.7
SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
-
Medium 4.7
SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated a…
-
Medium 5.4
SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the resp…
-
Unscored —
SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-d…
-
Critical 9.9CVE-2021-21477 EPSS 30%
SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools …
-
Medium 6.8
Under specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an unauthorized attacker to ex…
-
Medium 6.3
SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set …
-
Unscored —
Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allo…
-
Unscored —
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and a…
-
Unscored —
An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashe…
-
Unscored —
An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml.
-
Unscored —
An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized b…
-
Unscored —
Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2) menu_id, and (3) cashou…
-
Unscored —CVE-2020-13117 EPSS 69%
Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands…
-
Unscored —
Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to re…
-
Unscored —
Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP thr…
-
Unscored —
The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against s…
-
Unscored —
Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY…
-
Unscored —
A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecifi…
-
Unscored —
When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous u…
-
Medium 6.1
vrana/adminer via XSS in the history parameter in SQL command
Adminer through 4.7.8 allows XSS via the history parameter to the default URI.
-
Unscored —
A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. …
-
Unscored —
A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload a…