Archive
12 May 2021
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —
An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed w…
-
Medium 5.9
Argo CD leaked secret data into error messages and logs on invalid edits via UI
Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14.
-
High 7.8
Linux kernel llcp_sock_bind/connect use-after-free
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.
-
Unscored —
Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerabilit…
-
Unscored —
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands in…
-
Medium 6.5
Memory over-allocation in evm crate
evm is a pure Rust implementation of Ethereum Virtual Machine. Prior to the patch, when executing specific EVM opcodes related to memory operations that use `evm_core::Memory::copy_large`, the `evm` crate can over-allocate memory when it is not needed, making…
-
Unscored —
An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal in…
-
Unscored —
A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could l…
-
Unscored —
Chaos tool suite (ctools) module provides a number of APIs and extensions for Drupal, it's 8.x-3.x branch is a start fr…
-
Unscored —
Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An attacker can inject arbitra…
-
Unscored —CVE-2021-30214 EPSS 24%
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' v…
-
Unscored —
This module enables you to add customizable facets on search pages, from core search or searches provided by Search API…
-
Unscored —
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject arbitrary web script in '/…
-
Unscored —
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject arbitrary web script in '/…
-
Unscored —
This module provides a new UI experience for node editing using the Gutenberg Editor library. The module did not correc…
-
Unscored —
Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as …
-
Unscored —
An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.
-
Unscored —
A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0 when handling certain …
-
Unscored —
An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks vers…
-
Unscored —
An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.…
-
Unscored —CVE-2021-32607 EPSS 33%
An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not cal…
-
Unscored —CVE-2021-32608 EPSS 33%
An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/Boards/Partials/_ForumPost.cshtml does n…
-
High 7.3
Temporary Directory Hijacking Vulnerability in Keycloak
A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to the contents that keycloak stores in this directory. The high…
-
Unscored —
An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman …
-
Unscored —
A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause i…
-
Unscored —
A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bou…
-
Unscored —
Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the …
-
Unscored —
A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XM…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
Unscored —
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…
-
Unscored —
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…
-
Unscored —
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…
-
Unscored —
An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OS…
-
Unscored —
A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NE…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
Critical 9.8
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…