Archive
March 2021
Vulnerabilities first published in this month (UTC), newest first.
1,455 results · Feed
-
Unscored —
Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools.
-
Unscored —
SQL Injection vulnerability in MyBB before 1.8.26 via User Groups. (issue 3 of 3).
-
Unscored —
SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. (issue 2 of 3).
-
Unscored —CVE-2021-27946 Public exploit
SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).
-
Unscored —
SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.
-
Unscored —
A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions <…
-
Unscored —
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions <…
-
Unscored —
A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the syst…
-
Unscored —
A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE S…
-
Medium 6.5
A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions…
-
Unscored —
A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the syst…
-
Unscored —
A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the syst…
-
Unscored —
A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1). The Forgot Passw…
-
Unscored —
A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions <…
-
Unscored —
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions <…
-
Unscored —
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the af…
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can acce…
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow un…
-
Medium 5.5
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD…
-
Unscored —CVE-2021-27889 Public exploit
Cross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages.
-
Low 3.3
Directory Traversal
All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the disk where Tyk is running via the management API. The APIID…
-
Critical 9.8
ShopXO RCE Vulnerability
A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar where the suffix is JPG, which is uploaded after modifying the phar suffix.
-
Unscored —
A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access res…
-
Medium 5.6
Arbitrary Command Injection
This affects all versions of package ps-kill. If (attacker-controlled) user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization in …
-
Medium 5.6
Arbitrary Command Injection
This affects all versions of package kill-process-by-name. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization in the inde…
-
Unscored —CVE-2021-27695 Public exploit
Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbi…
-
Medium 6.4
IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended rece…
-
Medium 5.8
IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, w…
-
Unscored —
In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster se…
-
Unscored —
An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protect…
-
Unscored —
An issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the…
-
Unscored —
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation. ConnectSecure on Windows is aff…
-
Unscored —
SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation. ConnectSecure on Windows is affected.
-
Unscored —
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions. Conne…
-
Unscored —
When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs whe…
-
Unscored —
A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corre…
-
Unscored —
DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, bo…
-
High 7.5
Apache OpenMeetings: bandwidth can be overloaded with public web service
If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0
-
Unscored —CVE-2021-28379 Public exploit
web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allo…
-
Low 3.7CVE-2021-28378 Public exploit
Cross-site Scripting in Gitea
Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.