Archive
26 February 2021
Vulnerabilities first published on this day (UTC), newest first.
74 results · Feed
-
Unscored —
An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occu…
-
Unscored —CVE-2020-36079 Public exploit
Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attack…
-
High 7.5
A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision…
-
Medium 5.2
DOS vulnerability for Quoted Quality CSV headers
In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due…
-
Medium 5.4
Integer overflow on 32-bit systems
Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 o…
-
High 8.3
Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) bef…
-
Unscored —
Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute a…
-
High 8.3
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) befor…
-
High 8.2
Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 al…
-
High 8.3
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) befor…
-
Critical 9.0
Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-2542…
-
Critical 9.0
Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allo…
-
Critical 9.0
Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DS…
-
Unscored —
ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reacha…
-
Unscored —
In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Unscored —
In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Unscored —
In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Unscored —
In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation …
-
Unscored —
In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local info…
-
Unscored —
In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local …
-
Unscored —
In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local …
-
Unscored —
In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.1
Improper session management for soft logout
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2
-
Medium 6.8
CSV Injection via csv export
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2
-
Low 3.1
Open redirects on some federation and push requests
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, requests to user provided domains were not restricted to external…
-
Medium 4.3
Denial of service attack via .well-known lookups
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-kno…
-
Medium 5.3
Server-side Request Forgery (SSRF)
All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery (SSRF) via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as <iframe src='file:///etc/pas…
-
Low 3.5
Path traversal in Node-Red
Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path traversal via the Projects API. If the Projects feature is enabled, a user with `projects.read` per…
-
High 7.7
Prototype Pollution in Node-Red
Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier contains a Prototype Pollution vulnerability in the admin API. A badly formed request can modify the prototype of the default JavaScript Object wit…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed ev…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed ev…
-
High 7.5
AC500 V2 webserver denial of service vulnerability
The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop and not respond, leading to genuine users losing remote visibility of the PLC state. If a user attempts to login to the PLC while this vulnerability is exploited,…
-
Critical 9.9
Improper Access Control in Bosch Video Recording Manager
Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the underlying Microsoft Windows operating system. The fixed versions im…
-
Unscored —
best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor.
-
Unscored —
ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain di…
-
Unscored —
Changing the password on the module webpage does not require the user to type in the current password first. Thus, the …
-
Unscored —CVE-2021-26903 Public exploit
LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text'].
-
Unscored —CVE-2021-26904 Public exploit
LMA ISIDA Retriever 5.2 allows SQL Injection.