Archive
17 June 2021
Vulnerabilities first published on this day (UTC), newest first.
33 results · Feed
-
Unscored —
Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files …
-
Medium 6.8
Authentication granted with multiple firewalls
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. A vulnerability related to firewall authentication is in Symfony starting with version 5.3.0 and prior to 5.3.2. When an application defines multiple firewalls, …
-
Unscored —
In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the …
-
Unscored —
In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized chang…
-
Medium 4.1
Malicious Android application can crash the Nextcloud Android Client
Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client due to an uncaught exception. The vulnerability is patched in version 3.15.1.
-
Low 3.9
Malicious Android app could access Shared Preferences of the Nextcloud Android client
Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.16.1, a malicious app on the same device could have gotten access to the shared preferences of the Nextcloud Android application. This required user-interaction as a victim had …
-
Medium 6.5
Improper network isolation in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.
-
Medium 6.1
MantisBT allows XSS in manage_custom_field_edit_page.php
An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.
-
Medium 5.4
Improper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks
Wagtail is an open source content management system built on Django. A cross-site scripting vulnerability exists in versions 2.13-2.13.1, versions 2.12-2.12.4, and versions prior to 2.11.8. When the `{% include_block %}` template tag is used to output the val…
-
Medium 5.6
Prototype Pollution
All versions of package lutils are vulnerable to Prototype Pollution via the main (merge) function.
-
Unscored —
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.
-
Medium 6.8
IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitiv…
-
Unscored —
An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login P…
-
Unscored —
Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-con…
-
Unscored —
A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attack…
-
Unscored —
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 bec…
-
Unscored —
Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificat…
-
Unscored —
Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API be…
-
Unscored —
A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resu…
-
Unscored —
An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) r…
-
High 8.1
Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer
PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called (if such code is injected into the host project's scope by other means). If the $patternselect parameter to validateAddress() is set to 'php' (the default, defi…
-
Unscored —
An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) re…
-
Unscored —
An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Ve…
-
Unscored —
Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting (XS…
-
Unscored —
An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent…
-
Unscored —
Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an …
-
High 8.6
An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2…
-
Unscored —
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
-
Unscored —
In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHA…
-
Unscored —
Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulti…
-
Unscored —
An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 202…
-
Unscored —
An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022…
-
Unscored —
An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4…