Archive
30 June 2021
Vulnerabilities first published on this day (UTC), newest first.
69 results · Feed
-
Unscored —
Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive information (remote).
-
Critical 9.8
Craft CMS Remote Code Injection
An issue was discovered in Craft CMS before 3.6.7. In some circumstances, a potential Remote Code Execution vulnerability existed on sites that did not restrict administrative changes (if an attacker were somehow able to hijack an administrator's session).
-
Medium 6.1
Craft CMS Cross-site Scripting Vulnerability
An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads.
-
Unscored —CVE-2021-35956 Public exploit
Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote au…
-
High 7.5
XML2Dict XML Entity Expansion Vulnerability
XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service.
-
Unscored —
Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.
-
Unscored —
The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication byp…
-
Unscored —
xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary…
-
Unscored —
inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operat…
-
Medium 6.3
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length c…
-
Medium 6.3
Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which …
-
Medium 6.4
Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or es…
-
Medium 6.7
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on …
-
Medium 6.7
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of…
-
High 7.0
Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap meta…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restric…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restrict…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restrict…
-
High 7.7
Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which migh…
-
High 7.7
Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerabili…
-
High 7.9
Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening coul…
-
Critical 9.8
cryptctl: client side password hashing is equivalent to clear text password storage
A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Ser…
-
High 7.8
arpwatch: Local privilege escalation from runtime user to root
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run…
-
Unscored —
Dynamic stack buffer overflow in cachekey plugin
Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
-
Unscored —
Reading HTTP/2 frames too many times
Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
-
Unscored —
Specific sequence of HTTP/2 frames can cause ATS to crash
Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
-
Medium 6.1
Plone has stored XSS in folder contents
In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field.
-
Unscored —
TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_fi…