Archive
27 May 2021
Vulnerabilities first published on this day (UTC), newest first.
84 results · Feed
-
Unscored —
Local File Inclusion vulnerability in Ab Initio Control>Center before 4.0.2.6 allows remote attackers to retrieve arbit…
-
Critical 9.8
Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote …
KEV Apr 11, 2022 -
High 7.8
The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, s…
-
Unscored —
A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for c…
-
Unscored —
A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An atta…
-
Unscored —
A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, su…
-
Medium 6.5
Permissions bypass in KubeVirt
A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An attacker with access to create VMs could attach any secret within their namespace, allowing them to read the contents of that secret.
-
Unscored —
A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulner…
-
Unscored —
A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the …
-
Unscored —
A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplyi…
-
Unscored —
A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functio…
-
Unscored —
An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access netw…
-
Unscored —CVE-2021-20026 EPSS 12%
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection u…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory …
-
Unscored —
A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when re…
-
Medium 5.0
Insufficiently random values in Ansible
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulne…
-
Unscored —
A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the…
-
Unscored —
A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower us…
-
Unscored —
A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout. Thi…
-
Unscored —
A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed …
-
Unscored —
A flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is accessed via TCP. An attacke…
-
Medium 5.4
Cross-site scripting in RESTEasy
A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS a…
-
Unscored —
A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, whic…
-
High —
Listing of upload directory contents possible
There's an security issue in prosody-filer versions **< 1.0.1** which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other tha…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which mig…
-
Unscored —
A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might …
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which …
-
Unscored —
Cubecart 6.4.2 allows Session Fixation. The application does not generate a new session cookie after the user is logged…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which m…
-
Unscored —
A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, whi…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to …
-
Unscored —
A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might l…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, wh…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_deriva…
-
Unscored —
A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, whi…
-
Medium 5.8
StaticFile.fromUrl can leak presence of a directory
Http4s is a Scala interface for HTTP services. `StaticFile.fromUrl` can leak the presence of a directory on a server when the `URL` scheme is not `file://`, and the URL points to a fetchable resource under its scheme and authority. The function returns `F[Non…
-
Medium 4.3
Open Redirect in tenancy
Tenancy multi-tenant is an open source multi-domain controller for the Laravel web framework. In some situations, it is possible to have open redirects where users can be redirected from your site to any other site using a specially crafted URL. This is only …
-
Unscored —
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Vers…
-
Unscored —
When opening a specially crafted 3DXML file, the application containing Datakit Software libraries CatiaV5_3dRead, Cati…
-
Unscored —
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Vers…