Archive
13 April 2021
Vulnerabilities first published on this day (UTC), newest first.
207 results · Feed
-
Medium 5.4
SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malici…
-
Medium 6.4
SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed m…
-
Critical 9.9
SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create…
-
Medium 6.5
An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a wor…
-
Medium 4.3
SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not suff…
-
Medium 4.6
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs
The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to a toast. If your application displays toasts with user-supplied input, this could lead to a XSS vulnerability. The vulnerability has been p…
-
High 8.3
SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the …
-
High 8.2
Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensit…
-
Medium 6.5
SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows an attacker to read so…
-
Unscored —CVE-2021-22720 EPSS 31%
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus …
-
Unscored —CVE-2021-22719 EPSS 42%
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus …
-
Unscored —CVE-2021-22718 EPSS 28%
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus …
-
Unscored —CVE-2021-22717 EPSS 40%
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus …
-
High 7.8
A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code exec…
-
Unscored —
In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalatio…
-
Unscored —
In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local…
-
Unscored —
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Unscored —
In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of…
-
Unscored —
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This coul…
-
High 8.0
Account compromise by man-in-the-middle attack
ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable by a user can be read and modified by a third party. 1. Scratch user visits 3rd party site. 2. 3rd party site asks user for Scratch usernam…
-
Unscored —
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead …
-
Unscored —CVE-2021-0437 Public exploit
In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in…
-
Unscored —
In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escal…
-
Unscored —
In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a u…
-
Unscored —
In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow…
-
Unscored —
In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer ov…
-
Unscored —
In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write …
-
Unscored —CVE-2021-0435 Public exploit
In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could…
-
Unscored —CVE-2021-0431 Public exploit
In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —
In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free …
-
Unscored —
In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing…
-
Unscored —
In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to loc…
-
Unscored —
In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could l…
-
Unscored —CVE-2021-0433 Public exploit
In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth devi…
-
Unscored —
In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due t…
-
Unscored —
In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacki…
-
Critical 9.8
An out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A speci…
-
High 8.6
An out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh() functionality of Slic3r libslic…
-
High 8.0
Arbitrary File upload
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious cod…
-
High 8.3
Improper Neutralization of Directives in Dynamically Evaluated Code
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/…