Archive
9 June 2021
Vulnerabilities first published on this day (UTC), newest first.
27 results · Clear filters · Feed
-
High 7.8
Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable e…
-
High 8.2
Cross-Site Request Forgery (CSRF) in FastAPI
FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cro…
-
High 8.3
Reflected XSS in page parameter
An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.
-
High 8.3
Improper Input Validation of HTTP Headers
In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.
-
High 8.3
Reflected XSS in URL handler
An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the camera address can send a crafted link to a user, which will execute javascript code in the context o…
-
High 8.8
An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0.…
-
High 7.8
Under certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecu…
-
High 8.8
Out of bounds write vulnerability in McAfee GetSusp
Memory corruption vulnerability in the driver file component in McAfee GetSusp prior to 4.0.0 could allow a program being investigated on the local machine to trigger a buffer overflow in GetSusp, leading to the execution of arbitrary code, potentially trigge…
-
High 8.8
Circutor SGE-PLC1000 improper authentication
Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network wh…
-
High 7.5
Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packe…
-
High 8.4
Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdra…
-
High 7.8
Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdra…
-
High 7.8
Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdrag…
-
High 7.8
While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared mem…
-
High 7.8
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon …
-
High 8.4
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value…
-
High 7.8CVE-2020-11261 Exploited
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size…
KEV Dec 1, 2021 -
High 7.5
SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT,…
-
High 7.5
SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2…
-
High 7.5
SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -…
-
High 7.5
SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2…
-
High 7.5
SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2…
-
High 7.5
SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT,…
-
High 7.5
SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -…
-
High 7.5
SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2…
-
High 7.5
SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2…
-
High 7.5
SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -…