Archive
7 April 2021
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
Unscored —
Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions inc…
-
Critical 9.8
Uninitialized memory access in outer_cgi
An issue was discovered in the outer_cgi crate before 0.2.1 for Rust. A user-provided Read instance receives an uninitialized memory buffer from KeyValueReader.
-
Critical 9.8
Double-free in id-map
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clone_from upon a .clone panic.
-
Unscored —
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in remove_set upon a p…
-
Unscored —
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in get_or_insert upon …
-
Unscored —
Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root ter…
-
Critical 9.1
RSA signature validation vulnerability on maleable encoded message in jsrsasign
In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack.
-
Unscored —
In RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of the padding (and of t…
-
Unscored —
In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can …
-
Medium 4.3
Potential DoS through abuse of rate limit in libunity-webapps for Firefox
The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks unti…
-
Medium 4.3
Possible remote DOS in WebApps
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.0…
-
Unscored —
FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code…
-
Medium 6.5
In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted …
-
Critical 9.3
Unauthenticated Arbitrary YAML Write/Update leads to Code Execution
Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Partic…
-
Unscored —
Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is runnin…
-
Unscored —
Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerabl…
-
Unscored —
Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerab…
-
Unscored —
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inj…
-
Unscored —
Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an applicati…
-
Unscored —
Cross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject arbitrary web script and HTML …
-
Unscored —
In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2…
-
Unscored —CVE-2021-29627 Public exploit
In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, list…
-
Unscored —
In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2…
-
Unscored —
The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platfo…
-
Medium 4.3
CSRF vulnerability in Jenkins promoted builds Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.
-
Medium 4.3
View name validation bypass in Jenkins
Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.
-
Medium 4.3
Lack of type validation in agent related REST API in Jenkins
Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one …
-
High 7.5
Indico Tampering with links (e.g. password reset) in sent emails
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.
-
Unscored —
`sass-rs` has been deprecated
The `sass-rs` crate is not maintained anymore as libsass is deprecated. Consider using https://github.com/connorskees/grass or https://github.com/kaj/rsass instead. (Author's recommendation.)
-
Unscored —
GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is relat…
-
Unscored —
fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Director…
-
Unscored —
There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execu…
-
Unscored —CVE-2021-26709 EPSS 40%
D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticate…
-
High 7.5
Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is …
-
High 8.4
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compu…
-
High 7.2
Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Sn…
-
High 8.2
Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute…
-
High 8.2
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in S…
-
High 8.4
A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snap…
-
High 8.4
Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon A…