Archive
25 May 2021
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Unscored —
CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.
-
Unscored —
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.
-
Unscored —
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.
-
Unscored —
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.
-
Unscored —
CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.
-
Unscored —
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
-
Unscored —
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
-
Unscored —
CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.
-
Unscored —
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
-
Unscored —
Cross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive application actions by …
-
Unscored —
An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe includes functionality to qu…
-
Unscored —
An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe exposes a REST API that can …
-
Unscored —
An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe keeps a log in a folder wher…
-
High 7.5
DNS proxy and possible amplification attack
A DNS proxy and possible amplification attack vulnerability in WebClientInfo of Apache Wicket allows an attacker to trigger arbitrary DNS lookups from the server when the X-Forwarded-For header is not properly sanitized. This DNS lookup can be engineered to o…
-
Unscored —
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the not…