Skip to content
OpenAdvisories

Archive

25 May 2021

Vulnerabilities first published on this day (UTC), newest first.

55 results · Feed

  • Unscored —

    CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.

  • Unscored —

    CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.

  • Unscored —

    CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.

  • Unscored —

    CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.

  • Unscored —

    CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.

  • Unscored —

    CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.

  • Unscored —

    CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.

  • Unscored —

    CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.

  • Unscored —

    CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.

  • Unscored —

    Cross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive application actions by …

  • Unscored —

    An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe includes functionality to qu…

  • Unscored —

    An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe exposes a REST API that can …

  • Unscored —

    An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe keeps a log in a folder wher…

  • High 7.5

    DNS proxy and possible amplification attack

    A DNS proxy and possible amplification attack vulnerability in WebClientInfo of Apache Wicket allows an attacker to trigger arbitrary DNS lookups from the server when the X-Forwarded-For header is not properly sanitized. This DNS lookup can be engineered to o…

  • Unscored —

    The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the not…