Archive
May 2021
Vulnerabilities first published in this month (UTC), newest first.
1,521 results · Feed
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.3…
-
Low —
Network policy may be bypassed by some ICMP Echo Requests
## Impact Under certain conditions, ICMP Echo Request sent to a Cilium endpoint from an actor may bypass a network policy which _disallows_ access from the actor to the endpoint, but _allows_ from the endpoint to the actor. This does _NOT_ apply to UDP and TC…
-
Medium 6.6
Helm OCI credentials leaked into Argo CD logs
### Impact When Argo CD was connected to a Helm OCI repository with authentication enabled, the credentials used for accessing the remote repository were logged. Anyone with access to the pod logs - either via access with appropriate permissions to the Kubern…
-
High 8.8CVE-2021-31440 Public exploit
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …
-
Medium —
Information leakage in Error Handler
### Impact Information leakage in Error Handler ### Patches We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security…
-
Medium —
Authenticated Stored XSS in Administration
### Impact Authenticated Stored XSS in Administration ### Patches We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Se…
-
Medium 6.8
Remote Code Execution via traversal in TAL expressions
Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default, only users with the Manager role can add or edit Zope Pag…
-
Unscored —
Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The f…
-
Unscored —
STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP…
-
Unscored —
STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control.
-
Unscored —
The elliptic curve cryptography (ECC) hardware accelerator, part of the ARM® TrustZone® CryptoCell 310, contained in th…
-
Unscored —
The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4…
-
Unscored —
An issue was discovered in Nitrokey FIDO U2F firmware through 1.1. Communication between the microcontroller and the se…
-
Unscored —
In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the …
-
High 8.8
Relative Path Traversal Vulnerability in QTS and QuTS hero
A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology Di…
-
Unscored —
The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversa…
-
Unscored —
Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does no…
-
Unscored —
There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficien…
-
Unscored —
rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of impro…
-
Unscored —
There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation …
-
Unscored —
In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In so…
-
Unscored —
In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in som…
-
Unscored —
In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revisio…
-
Unscored —
A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_e…
-
Unscored —
In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. …
-
Unscored —
Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user …
-
Unscored —
Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a re…
-
Low —
Local directory executable lookup in sops (Windows-only)
### Impact Windows users using the sops direct editor option (`sops file.yaml`) can have a local executable named either `vi`, `vim`, or `nano` executed if running sops from `cmd.exe` This attack is only viable if an attacker is able to place a malicious bina…
-
Critical 9.6
Various
Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.0.4, there is an authenticated RCE via .phar file upload. A php web shell can be uploaded via the Documents & Files upload feature. Som…
-
Unscored —
An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty MET…
-
Unscored —
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in …
-
Unscored —
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large…
-
High 7.7
Remote Memory Exposure
This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names.
-
Low 2.4
CSRF allowing modification of commands, modules, banphrases through hidden iFrames
Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery (CSRF). Hosters of the bot should upgrade to `v1.52` or `stable` to install the patch or, as a workaround, can add one modern dependency.
-
Unscored —
Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the sys…
-
Unscored —
Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via…
-
Unscored —
A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.v…
-
Medium 6.1
Plone XSS in User Fullname Property and File Upload
Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted…
-
Unscored —
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web scrip…