Archive
17 March 2021
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
The [Fast Autocomplete module](https://www.drupal.org/project/fac) provides fast IMDB-like suggestions below a text inp…
-
Unscored —
Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the …
-
Unscored —
Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may…
-
Unscored —
In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special cha…
-
Unscored —
Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCU_F…
-
Unscored —
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an…
-
Unscored —
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Sh…
-
Unscored —
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and …
-
High 7.5
Regular Expression Denial of Service (ReDoS) in ua-parser-js
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
-
Unscored —
Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user…
-
High 7.5
Pygments vulnerable to Regular Expression Denial of Service (ReDoS)
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an …
-
Unscored —CVE-2020-17525 EPSS 40%
Remote unauthenticated denial-of-service in Subversion mod_authz_svn
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service.…
-
Critical 9.8
EIC e-document system - Broken Authentication
EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vulnerability allows remote attacker to obtain users’ credential information without logging in the system, and further acquire the privileged…
-
Critical 9.8
EIC e-document system - SQL Injection
The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege.
-
Unscored —
In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and tra…
-
Unscored —
Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in …
-
Unscored —
Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Indu…
-
Unscored —
Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required i…
-
Unscored —
Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdrag…
-
Unscored —
Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon…
-
Unscored —
Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snap…
-
Unscored —
Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it expose…
-
Unscored —
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer …
-
Unscored —
Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snap…
-
Unscored —
Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdrago…
-
Unscored —
Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due…
-
Unscored —
While processing storage SCM commands there is a time of check or time of use window where a pointer used could be inva…
-
Unscored —
Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon A…
-
Unscored —
HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information …
-
Unscored —
Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Com…
-
Unscored —
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdrago…
-
Unscored —
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdrago…
-
Unscored —
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdrago…
-
Unscored —
Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of inp…
-
Unscored —
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdrago…
-
Unscored —
Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROH…
-
Unscored —
The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/sec…
-
Unscored —
autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Dir…
-
Unscored —
rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing bey…