Archive
19 February 2021
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
High 8.8
Integer Overflow in png-img
An integer overflow in the PngImg::InitStorage_() function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file.
-
Unscored —
An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to…
-
Unscored —
Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campai…
-
Medium 5.9
Improper Certificate Validation in TweetStream
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.
-
Medium 5.9
Improper Certificate Validation in twitter-stream
In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused).
-
Unscored —
An issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with privileges to edit a …
-
Medium 6.5
Unauthorized access to Class instance in Jinjava
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
-
Medium 6.1
Open redirect in Slashify
The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring.
-
Unscored —
In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access …
-
High 7.5
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU M…
-
High 7.5
Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configurati…
-
Unscored —
A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in n…
-
Unscored —
A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x be…
-
Unscored —
The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and …
-
Unscored —
A Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus…
-
Unscored —CVE-2021-27328 Public exploit
Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware …
-
High 7.5
Metasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
-
Unscored —
Fuji Electric V-Server Lite
The affected Fuji Electric V-Server Lite versions prior to 3.3.24.0 are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
-
High 8.8
An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.…
-
High 8.6
Cross-site Scripting (XSS)
This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1) When parsing HTML from remote URLs, the HTML code on the main page is sanitized, b…
-
High 7.9
Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally aut…
-
Unscored —
Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version …
-
Medium 6.1
A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8…
-
Medium 5.9
A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx…
-
Medium 5.9
A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700…
-
Unscored —
SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the se…
-
Unscored —
components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitra…
-
High —
Cross-Site Request Forgery (CSRF) vulnerability in Apache MyFaces
In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically weak implicit and explicit cross-site request forgery (CSRF) tokens. Due to that limitation, it is poss…
-
Unscored —
ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the …
-
Low 3.9
The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a ba…
-
Unscored —
The File Firewall before 2.8.0 for ownCloud Server does not properly enforce file-type restrictions for public shares.
-
Medium 6.1
In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system…
-
Low 3.5
ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remov…
-
Medium 6.8
ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version …
-
Unscored —
An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote p…
-
Unscored —
An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by…
-
Unscored —
Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF.
-
Unscored —
Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMD…
-
Unscored —
Amaze File Manager before 3.5.1 allows attackers to obtain root privileges via shell metacharacters in a symbolic link.
-
Unscored —
Chamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI.