Archive
13 May 2021
Vulnerabilities first published on this day (UTC), newest first.
63 results · Feed
-
Critical 9.8CVE-2021-33026 Public exploit
Deserialization of Untrusted Data in Flask-Caching
The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage (e.g., filesystem, Memcached, Redis, etc.), they can c…
-
Unscored —
Piwigo 11.4.0 allows admin/user_list_backend.php order[0][dir] SQL Injection.
-
Unscored —
Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the replacement policy specified in BIP125, which makes …
-
Medium —
Cross-site Scripting in aurelia-framework
The HTMLSanitizer class in html-sanitizer.ts in all released versions of the Aurelia framework 1.x repository is vulnerable to XSS. The sanitizer only attempts to filter SCRIPT elements, which makes it feasible for remote attackers to conduct XSS attacks via …
-
Unscored —
A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to ex…
-
Unscored —
An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote authenticated attackers to…
-
Medium 5.3
An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is …
-
Medium 6.3
An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 M…
-
Low 2.9
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A …
-
Low 2.9
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. Th…
-
Unscored —
Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based …
-
Low 1.8
An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A …
-
Low 3.3
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) to `datetime` or `date` fields causes validation to run forever with 100% CPU usa…
-
Medium 6.5
Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.
GraphHopper is an open-source Java routing engine. In GrassHopper from version 2.0 and before version 2.4, there is a regular expression injection vulnerability that may lead to Denial of Service. This has been patched in 2.4 and 3.0 See this pull request for…
-
Unscored —
admin/user_import.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities.
-
Unscored —
Elastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity Injection issue (XXE) in the …
-
Unscored —
In Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw was found in the monito…
-
Unscored —
Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack …
-
Medium 5.3
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could…
-
Unscored —
In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.sessi…
-
Medium 5.3
API information disclosure flaw in Elasticsearch
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index wh…
-
Unscored —
An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and …
-
Medium 6.5
IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may…
-
Unscored —
A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a…
-
Unscored —
An issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for comparing certain secre…
-
Unscored —
Prosody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation requests.
-
Unscored —
An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback ena…
-
Unscored —
An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote unauthenticated denial-of-…
-
Unscored —
An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither …
-
Unscored —
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a passwor…
-
Unscored —
Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php.
-
Unscored —
A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator…
-
Unscored —
A malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_c…
-
Unscored —
A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyi…
-
Unscored —
A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.
-
Unscored —
File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type …
-
Unscored —
A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to Open…
-
Unscored —CVE-2020-27824 Public exploit
A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker …
-
Critical 9.4
WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operati…
-
Critical 10.0
WAGO: Managed Switches: Unauthorized creation of user accounts
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.