Skip to content
OpenAdvisories

Archive

11 June 2021

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Critical 10.0

    Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

  • Critical 9.8

    A heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality of Accusoft ImageGear …

  • Critical 9.8

    An improper array index validation vulnerability exists in the TIF IP_planar_raster_unpack functionality of Accusoft Im…

  • Critical 9.9

    Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an…

  • Critical 9.9

    A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command C…

  • Critical 9.8

    A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic…

  • Critical 9.8

    A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic…

  • Critical 9.8

    A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic…

  • Critical 9.8

    A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogi…

  • Critical 9.0

    An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Releas…

  • Critical 9.0

    An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Rele…

  • Critical 9.0

    An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor libr…

  • Critical 9.0

    An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-20…

  • Critical 9.0

    An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-20…

  • Critical 9.8

    OS command injection in ripgrep

    ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.