Archive
17 February 2021
Vulnerabilities first published on this day (UTC), newest first.
112 results · Feed
-
High 8.8
Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi Conne…
-
Unscored —
Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symli…
-
High 8.1CVE-2020-8625 EPSS 64%
A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicit…
-
High 7.8
The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.
-
High 7.8
The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT.
-
Unscored —
VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff…
-
High 8.8
GramAddict bot uses dependency with reverse tcp backdoor
GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.
-
Unscored —
avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-…
-
Unscored —
core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.
-
High —
Path traversal in bolt/core
Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.
-
Unscored —
Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain acce…
-
High 8.8
OpenNMS Horizon RCE via JEXL2 expression
OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions.
-
High 8.8
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCA…
-
High 8.8
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCA…
-
High 8.8
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCA…
-
High 8.8
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCA…
-
High 7.7
A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. A spe…
-
Medium 6.1
Cisco Webex Meetings Cross-Site Scripting Vulnerability
A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected service. The vulnerability is due to in…
-
High 7.8CVE-2021-1366 Public exploit
Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture (HostScan) Module is…
-
Medium 5.5
Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability
A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared me…
-
Medium 5.3
Cisco StarOS Denial of Service Vulnerability
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to a log…
-
Medium 6.5
Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities
Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sen…
-
Medium 6.5
Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities
Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sen…
-
Unscored —CVE-2021-27224 EPSS 38%
The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012…
-
Unscored —
The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+…
-
Unscored —
PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.
-
Unscored —
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability coul…
-
Unscored —
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
-
Unscored —
The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads …
-
Unscored —
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obta…
-
Unscored —
In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigControlle…
-
Low 3.7
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted c…
-
Low 3.7
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture…
-
Medium 5.3
Apache Airflow: Lineage API endpoint for Experimental API missed authentication check
The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass t…
-
Medium 6.5
CWE-284 Improper Access Control on Configurations Endpoint for the Stable API
Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `[webserver] expose_config` is set to `False` in `airflow.cfg…
-
Unscored —
Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.…
-
Unscored —
Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version…
-
Unscored —
Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters befor…
-
Unscored —
Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before ver…
-
Unscored —
Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before ver…