Archive
20 April 2021
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
High 7.6
DNS rebinding in pupnp
The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of the `Host` header. This can …
-
High 7.5
A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability e…
-
High 8.1
LFI and possible code execution on discord-recon using tools arguments
Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in Discord Recon Server prior to 0.0.3 could be exploited to read internal files from the system and write files into the system resulting in …
-
High 7.6
TIBCO Administrator SQL injection vulnerability
The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Editi…
-
High 7.5
Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may m…
-
High 7.5
A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exi…
-
High 8.2
IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when p…