Archive
21 May 2021
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
High 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/l…
-
Medium 6.1
Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.
-
Medium 5.4
Cross-site scripting in Plone
Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.
-
Critical 9.9
Incorrect Permission Assignment for Critical Resource in Plone
Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script.
-
Medium 4.3
Server-Side Request Forgery in Plone
Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.
-
High 7.5
Server-Side Request Forgery in Plone
Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.
-
Medium 5.4
Cross-site scripting in Plone
Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document.
-
Medium 5.4
Cross-site scripting in Plone
Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.
-
Medium 5.2
Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability.…
-
High 8.8
Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged…
-
High 7.5
PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY…
-
Unscored —CVE-2008-3280 Public exploit
It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the De…
-
Low 3.1
IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters …
-
High 7.2
Deserialization of Untrusted Data in Emissary
Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserialization of post-authenticated requests to the [`WorkSpaceClientEnqueue.action`](https://github.com/NationalSecurityAgency/emissary/blob/30c…
-
Unscored —
An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interf…
-
Unscored —
A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able exec…
-
Unscored —
An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolu…
-
Unscored —
A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If …
-
Unscored —
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
-
Low —
A failed upgrade may lead to hung goroutines
### Impact Processes using tableflip may encounter hung goroutines in the parent process, after a failed upgrade. The Go runtime has annoying behaviour around setting and clearing O_NONBLOCK: exec.Cmd.Start() ends up calling os.File.Fd() for any file in exec.…
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
-
Medium —
Import of incorrectly embargoed keys could cause early publication
### Impact If your installation is using the `export-importer` service, there is potential impact. If your installation is not importing keys via the `export-importer` services, your installation is not impacted. In versions `0.19.1` and earlier, the `export-…
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
-
High 7.5
Import loops in account imports, nats-server DoS
(This advisory is canonically <https://advisories.nats.io/CVE/CVE-2020-28466.txt>) ## Problem Description An export/import cycle between accounts could crash the nats-server, after consuming CPU and memory. This issue was fixed publicly in <https://github.com…
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memo…
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The …
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign.…
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early…
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is pos…
-
High 8.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job …
-
Critical 9.8CVE-2021-31474 EPSS 94%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Pe…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.3…
-
Low —
Network policy may be bypassed by some ICMP Echo Requests
## Impact Under certain conditions, ICMP Echo Request sent to a Cilium endpoint from an actor may bypass a network policy which _disallows_ access from the actor to the endpoint, but _allows_ from the endpoint to the actor. This does _NOT_ apply to UDP and TC…
-
Medium 6.6
Helm OCI credentials leaked into Argo CD logs
### Impact When Argo CD was connected to a Helm OCI repository with authentication enabled, the credentials used for accessing the remote repository were logged. Anyone with access to the pod logs - either via access with appropriate permissions to the Kubern…
-
High 8.8CVE-2021-31440 Public exploit
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …
-
Medium —
Information leakage in Error Handler
### Impact Information leakage in Error Handler ### Patches We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security…
-
Medium —
Authenticated Stored XSS in Administration
### Impact Authenticated Stored XSS in Administration ### Patches We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Se…