22 April 2021

297 results · Feed

• Unscored —
  CVE-2021-31546

  An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive supp…

  Apr 22, 2021
• Unscored —
  CVE-2021-31547

  An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its AbuseFilterCheckMatch API reveal…

  Apr 22, 2021
• Unscored —
  CVE-2021-31548

  An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. A MediaWiki user who is partially bl…

  Apr 22, 2021
• Unscored —
  CVE-2021-31549

  An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The Special:AbuseFilter/examine form…

  Apr 22, 2021
• Unscored —
  CVE-2021-31550

  An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, …

  Apr 22, 2021
• Unscored —
  CVE-2021-31551

  An issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads for Token-related que…

  Apr 22, 2021
• Unscored —
  CVE-2021-31552

  An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly executed certain rule…

  Apr 22, 2021
• Unscored —
  CVE-2021-31553

  An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki usernames with trailing whit…

  Apr 22, 2021
• Unscored —
  CVE-2021-31554

  An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly handled account blocks…

  Apr 22, 2021
• Unscored —
  CVE-2021-31555

  An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. It did not validate the oarc_version (aka …

  Apr 22, 2021
• Medium 6.5
  CVE-2021-29466

  Path Traversal at Discord-Recon .recon Command Path

  Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose important information. As a workaround, a bot maintainer can locate the file `ap…

  DEMON1A Discord-Recon
  Apr 22, 2021
• High 8.3
  CVE-2021-29465

  Remote file overwrite on discord-recon can result in DoS and Remote Code Execution

  Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution wh…

  DEMON1A Discord-Recon
  Apr 22, 2021
• Medium 6.1
  CVE-2021-29467

  Self-XSS

  Wrongthink is an encrypted peer-to-peer chat program. A user could check their fingerprint into the service and enter a script to run arbitrary JavaScript on the site. No workarounds exist, but a patch exists in version 2.4.1.

  birb-digital wrongthink
  Apr 22, 2021
• Unscored —
  CVE-2021-3496

  A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file.

  jhead jhead Debian Ubuntu
  Apr 22, 2021
• Low 2.7
  CVE-2021-2175 Public exploit

  Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.1.…

  Oracle Database - Enterprise Edition
  Apr 22, 2021
• Medium 4.1
  CVE-2021-2173 Public exploit

  Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 1…

  Oracle Database - Enterprise Edition
  Apr 22, 2021
• Low 2.3
  CVE-2021-2207

  Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that …

  Oracle Database - Enterprise Edition
  Apr 22, 2021