Archive
May 2021
Vulnerabilities first published in this month (UTC), newest first.
1,521 results · Feed
-
Medium 4.7
Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These…
-
Medium 4.7
Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These…
-
Medium 4.7
Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These…
-
Medium 4.7
Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These…
-
Medium 4.8
Cisco Finesse Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validat…
-
Medium 4.4
Cisco ADE-OS Local File Inclusion Vulnerability
A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to…
-
High 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/l…
-
Medium 6.1
Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS.
-
Medium 5.4
Cross-site scripting in Plone
Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item.
-
Critical 9.9
Incorrect Permission Assignment for Critical Resource in Plone
Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script.
-
Medium 4.3
Server-Side Request Forgery in Plone
Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file.
-
High 7.5
Server-Side Request Forgery in Plone
Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel.
-
Medium 5.4
Cross-site scripting in Plone
Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document.
-
Medium 5.4
Cross-site scripting in Plone
Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.
-
Medium 5.2
Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability.…
-
High 8.8
Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged…
-
High 7.5
PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY…
-
Unscored —CVE-2008-3280 Public exploit
It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the De…
-
Low 3.1
IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters …
-
High 7.2
Deserialization of Untrusted Data in Emissary
Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserialization of post-authenticated requests to the [`WorkSpaceClientEnqueue.action`](https://github.com/NationalSecurityAgency/emissary/blob/30c…
-
Unscored —
An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interf…
-
Unscored —
A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able exec…
-
Unscored —
An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolu…
-
Unscored —
A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If …
-
Unscored —
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
-
Low —
A failed upgrade may lead to hung goroutines
### Impact Processes using tableflip may encounter hung goroutines in the parent process, after a failed upgrade. The Go runtime has annoying behaviour around setting and clearing O_NONBLOCK: exec.Cmd.Start() ends up calling os.File.Fd() for any file in exec.…
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
-
Medium —
Import of incorrectly embargoed keys could cause early publication
### Impact If your installation is using the `export-importer` service, there is potential impact. If your installation is not importing keys via the `export-importer` services, your installation is not impacted. In versions `0.19.1` and earlier, the `export-…
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
-
Unscored —
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
-
High 7.5
Import loops in account imports, nats-server DoS
(This advisory is canonically <https://advisories.nats.io/CVE/CVE-2020-28466.txt>) ## Problem Description An export/import cycle between accounts could crash the nats-server, after consuming CPU and memory. This issue was fixed publicly in <https://github.com…
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memo…
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The …
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign.…
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early…
-
Unscored —
A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is pos…
-
High 8.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job …
-
Critical 9.8CVE-2021-31474 EPSS 94%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Pe…