Archive
March 2021
Vulnerabilities first published in this month (UTC), newest first.
303 results · Clear filters · Feed
-
Medium 5.3
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the sy…
-
Medium 6.2
A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permissi…
-
Medium 4.7
SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.3…
-
Medium 6.1
Velocity Tools XSS Vulnerability
The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS v…
-
Medium 5.9CVE-2021-21295 EPSS 19%
Possible request smuggling in HTTP/2 due missing validation
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that…
-
Medium 5.9
Regular Expression Denial of Service (ReDoS)
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.
-
Medium 6.5
Potential DoS in Besu HTTP JSON-RPC API
Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. In Besu before version 1.5.1 there is a denial-of-service vulnerability involving the HTTP JSON-RPC API service. If username and password authentication is enabled for th…
-
Medium 6.8
Keycloak Missing authentication for critical function
A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulner…
-
Medium 4.9
An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Adm…
-
Medium 5.5
A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow con…
-
Medium 4.9
An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified, f…
-
Medium 5.3
IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could…
-
Medium 4.3
When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise Vie…
-
Medium 4.3
When a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted sources in SAP 3D Visu…
-
Medium 4.3
When a user opens manipulated PhotoShop Document (.PSD) format files received from untrusted sources in SAP 3D Visual E…
-
Medium 4.3
When a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual Enterprise Viewer vers…
-
Medium 4.3
When a user opens manipulated Interchange File Format (.IFF) format files received from untrusted sources in SAP 3D Vis…
-
Medium 4.3
When a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted sources in SAP 3D Visual …
-
Medium 4.3
When a user opens manipulated Portable Document Format (.PDF) format files received from untrusted sources in SAP 3D Vi…
-
Medium 4.3
When a user opens manipulated Scalable Vector Graphics (.SVG) format files received from untrusted sources in SAP 3D Vi…
-
Medium 4.3
When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D …
-
Medium 6.8
SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in…
-
Medium 4.3
When a user opens manipulated Graphics Interchange Format (.GIF) format files received from untrusted sources in SAP 3D…
-
Medium 6.8
SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does …
-
Medium 6.5
Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to dese…
-
Medium 5.3
Sensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin
The `com.bmuschko:gradle-vagrant-plugin` Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being e…
-
Medium 5.3
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and…
-
Medium 5.6
react-dev-utils OS Command Injection in function `getProcessForPort`
react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. O…
-
Medium 6.1
Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attac…
-
Medium 6.5
Keycloak discloses information without authentication
A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL l…
-
Medium 5.7CVE-2021-21337 Public exploit
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality c…
-
Medium 4.3
Exposure of Sensitive Information to an Unauthorized Actor
A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions when executing a query against a recently updated document. Thi…
-
Medium 6.5
Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager
Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the ZODB Rol…
-
Medium 5.3
Basic Authentication can be bypassed using a malformed username
In the SPNEGO HTTP Authentication Module for nginx (spnego-http-auth-nginx-module) before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication…
-
Medium 6.7CVE-2020-5014 Public exploit
IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary co…
-
Medium 4.8
IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration invitation link to impersonate…
-
Medium 5.9
IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens…
-
Medium 6.8
Insecure Direct Object Reference (IDOR) on "Solutions"
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 there is an Insecure Direct Object Reference (IDOR) on "Solutions". This vulnerabil…
-
Medium 6.2
Stored XSS in budget type
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 a new budget type can be defined by user. This input is not correctly filtered. Thi…
-
Medium 6.8
Unsafe Reflection in getItemForItemtype()
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 non-authenticated user can remotely instantiate object of any class existing in the…