Archive
9 February 2021
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
Medium 5.3
insert_slice_clone can double drop if Clone panics.
An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insert_slice_clone can perform a double drop.
-
Medium 5.3
Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneo…
-
Medium 5.5
Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the…
-
Medium 4.7
SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
-
Medium 4.7
SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated a…
-
Medium 5.4
SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the resp…
-
Medium 6.8
Under specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an unauthorized attacker to ex…
-
Medium 6.3
SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set …
-
Medium 6.1
vrana/adminer via XSS in the history parameter in SQL command
Adminer through 4.7.8 allows XSS via the history parameter to the default URI.
-
Medium 6.5
IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via th…
-
Medium 5.3
IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user us…
-
Medium 4.0
IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a us…
-
Medium 6.9
IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using m…
-
Medium 5.3
IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to improper…
-
Medium 6.3
Cross-site Scripting (XSS)
The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.
-
Medium 6.5
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…