Archive
May 2021
Vulnerabilities first published in this month (UTC), newest first.
1,521 results · Feed
-
Unscored —
A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scr…
-
Unscored —
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet proce…
-
Medium 6.5
SysJust CTS Web - Broken Authentication
The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote attackers can manipulate cookies to access other accounts and trade in the stock market with spoofed identity.
-
Medium 5.3
SysJust CTS Web - Broken Access Control
The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the use…
-
Medium 4.7
SysJust CTS Web - Reflected XSS
The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token that triggered the attack.
-
Medium 5.4
Hundred Plus 101EIP - Stored XSS-2
Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to inject JavaScript and perform a stored XSS attack.
-
Medium 5.4
Hundred Plus 101EIP - Stored XSS-1
Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject JavaScript and perform a stored XSS attack.
-
High 7.5
Uncontrolled Resource Consumption in trim-newlines
The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.
-
High 7.5
Denial of service in css-what
The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
-
Medium 6.5CVE-2021-33620 EPSS 80%
Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to al…
-
Unscored —
When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a sp…
-
Unscored —
Local File Inclusion vulnerability in Ab Initio Control>Center before 4.0.2.6 allows remote attackers to retrieve arbit…
-
Critical 9.8
Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote …
KEV Apr 11, 2022 -
High 7.8
The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, s…
-
Unscored —
A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for c…
-
Unscored —
A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An atta…
-
Unscored —
A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, su…
-
Medium 6.5
Permissions bypass in KubeVirt
A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An attacker with access to create VMs could attach any secret within their namespace, allowing them to read the contents of that secret.
-
Unscored —
A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulner…
-
Unscored —
A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the …
-
Unscored —
A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplyi…
-
Unscored —
A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functio…
-
Unscored —
An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access netw…
-
Unscored —CVE-2021-20026 EPSS 12%
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection u…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory …
-
Unscored —
A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when re…
-
Medium 5.0
Insufficiently random values in Ansible
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulne…
-
Unscored —
A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the…
-
Unscored —
A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower us…
-
Unscored —
A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout. Thi…
-
Unscored —
A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed …
-
Unscored —
A flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is accessed via TCP. An attacke…
-
Medium 5.4
Cross-site scripting in RESTEasy
A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS a…
-
Unscored —
A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, whic…
-
High —
Listing of upload directory contents possible
There's an security issue in prosody-filer versions **< 1.0.1** which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other tha…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which mig…
-
Unscored —
A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might …
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which …
-
Unscored —
Cubecart 6.4.2 allows Session Fixation. The application does not generate a new session cookie after the user is logged…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which m…