Archive
18 March 2021
Vulnerabilities first published on this day (UTC), newest first.
96 results · Feed
-
Medium 6.3
Null characters not escaped in shescape
shescape is a simple shell escape package for JavaScript. In shescape before version 1.1.3, anyone using _Shescape_ to defend against shell injection may still be vulnerable against shell injection if the attacker manages to insert a into the payload. For an …
-
Unscored —
The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They…
-
Critical 9.8
Command injection in eslint-fixer
The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository ha…
-
Unscored —
WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send malic…
-
Unscored —
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and inc…
-
High 8.2CVE-2021-27358 EPSS 83%
Denial of service in Grafana
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
-
Unscored —
Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escap…
-
Unscored —
The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinven…
-
Unscored —
Softaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Va…
-
Unscored —
In JetBrains PhpStorm before 2020.3, source code could be added to debug logs.
-
Unscored —
Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::File_Gxf::ChooseParser_Channe…
-
Unscored —
A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could target traffic using …
-
Unscored —
A denial of service vulnerability was discovered in nbdkit. A client issuing a certain sequence of commands could possi…
-
Unscored —
A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can pr…
-
Unscored —
A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the …
-
Unscored —
Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) suffers from a reflected XSS vulnerability due to unsanitized SSID value …
-
High 7.2
Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability
A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the devic…
-
Unscored —
A vulnerability was found in the Quay web application. Sessions in the Quay web application never expire. An attacker, …
-
Medium 5.3
exacqVision Web Services - Information Exposure
A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system.
-
Unscored —
In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implement…
-
High 7.6
XSS in Wiki.js
Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scripting through mustache expressions in code blocks. This vulnerability exists due to mustache expressions being parsed by Vue during content…
-
Unscored —
Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a lo…
-
Unscored —
Multiple files and folders in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0. are installed with Read/Write permissions f…
-
Unscored —
SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditFolder.php.
-
Unscored —
SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php.
-
Medium 5.4
Concrete CMS Cross-site Scripting via Survey Blocks
Concrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct XSS attacks via a crafted survey block. This requires at least Editor privileges.
-
Unscored —
The unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary c…
-
Unscored —
The unofficial apple/swift-format extension before 1.1.2 for Visual Studio Code allows remote attackers to execute arbi…
-
Medium 6.1
Cross-Site Scripting in Qiita-Markdown
Increments Qiita::Markdown before 0.33.0 allows XSS in transformers.
-
Unscored —
The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath.
-
Unscored —
The unofficial Swift Development Environment extension before 2.12.1 for Visual Studio Code allows remote attackers to …
-
Unscored —
The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary cod…
-
Unscored —
Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the 'text/csv' content-type in the request.
-
Unscored —
Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)
Unvalidated input and lack of output encoding in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not sanitise the mic_comment field (Notes on time) when adding/editing an event, allowing users with privilege as low as author to a…
-
Unscored —
301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection
Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections.
-
Unscored —
MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple
A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address.
-
Unscored —
Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export
Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.
-
Unscored —
Modern Events Calendar Lite < 5.16.6 - Authenticated SQL Injection
Unvalidated input in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.6, did not sanitise the mec[post_id] POST parameter in the mec_fes_form AJAX action when logged in as an author+, leading to an authenticated SQL Injection issue.
-
Unscored —
AccessPress Social Icons < 1.8.1 - Authenticated SQL Injection
Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.
-
Unscored —
Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.