Archive
May 2021
Vulnerabilities first published in this month (UTC), newest first.
1,521 results · Feed
-
Unscored —
A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() insi…
-
Unscored —
Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which coul…
-
Unscored —
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let …
-
Unscored —
An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with admini…
-
High —
Arbitrary Code Execution in json-ptr
There is a security vulnerability in `json-ptr` versions prior to v2.1.0 in which an unscrupulous actor may execute arbitrary code. If your code sends un-sanitized user input to json-ptr's .get() method, your project is vulnerable to this injection-style vuln…
-
Unscored —
Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remot…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStrux…
-
Unscored —
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause i…
-
Unscored —
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a…
-
Unscored —
Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 a…
-
Unscored —
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser …
-
Unscored —
Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 an…
-
Unscored —
Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 a…
-
Unscored —
Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which coul…
-
Unscored —
Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which coul…
-
Unscored —
Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSE…
-
Unscored —
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of…
-
Unscored —
Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that c…
-
Unscored —
Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a re…
-
Unscored —
Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could …
-
Unscored —
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through i…
-
Unscored —
In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not chang…
-
Unscored —
In Versa Director, the un-authentication request found.
-
Unscored —
In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on th…
-
Unscored —
In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within config…
-
Unscored —
In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and …
-
Unscored —
In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or k…
-
Unscored —
In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host …
-
Unscored —
Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not hav…
-
Unscored —
redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, all…
-
Unscored —
Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an …
-
Unscored —
It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it…
-
Unscored —
It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it…
-
Unscored —
It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the …