Archive
June 2021
Vulnerabilities first published in this month (UTC), newest first.
1,711 results · Feed
-
Unscored —
In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. …
-
Unscored —
In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This …
-
Unscored —
In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local in…
-
Unscored —
In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe P…
-
Unscored —
In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing per…
-
Unscored —
In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This cou…
-
Unscored —
In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an inse…
-
Unscored —
In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and Ap…
-
Unscored —
In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead …
-
Unscored —
Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to versi…
-
Unscored —
Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions pri…
-
Unscored —
Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to ve…
-
Unscored —
Cross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server V10 Manual (Windows) …
-
Unscored —
Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthori…
-
Unscored —
NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the in…
-
Unscored —
Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlie…
-
Unscored —
Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbi…
-
Unscored —
Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット (asken diet) for Android versions fr…
-
Unscored —
Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwis…
-
Unscored —
Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary s…
-
High 7.8
Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a pro…
-
Unscored —
Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to pr…
-
Unscored —
Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive …
-
Medium 5.0
Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorr…
-
Medium 6.3
Bootloader contains a vulnerability in NVIDIA TegraBoot where a potential heap overflow might allow an attacker to cont…
-
Medium 6.3
The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where t…
-
Medium 6.3
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation c…
-
Medium 6.8
Blind Server-Side Request Forgery (SSRF) in eLabFTW
eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is "blind" because the attacker cannot see the result of the request. Issue has been patched in eLabFTW…
-
High 7.5
ReDOS in Vfsjfilechooser2
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs.
-
Unscored —
An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a R…
-
Unscored —CVE-2021-24383 Public exploit
WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue
-
Unscored —
Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass
The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user (even unauthenticated) to add unlimited like/dislike to any…
-
Unscored —
Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload
The Autoptimize WordPress plugin before 2.7.8 does not check for malicious files such as .html in the archive uploaded via the 'Import Settings' feature. As a result, it is possible for a high privilege user to upload a malicious file containing JavaScript co…
-
Unscored —
Autoptimize < 2.7.8 - Race Condition leading to RCE
The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Import Settings' feature, however this is not sufficient to protect against RCE as a race condition can be achieved in betw…
-
Unscored —
Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"
The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archive via the "Import Settings" feature, after its extraction. However, the extracted folders are not checked and it is possible to upload a zi…
-
Medium 5.3
Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak
The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that…
-
Unscored —
WP Hardening < 1.2.2 - Reflected XSS via historyvalue
The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET parameter before outputting it in a Javascript block, leading to a reflected Cross-Site Scripting issue.
-
Unscored —
WP Hardening < 1.2.2 - Reflected XSS via URI
The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER['REQUEST_URI'] before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue.
-
Unscored —
GetPaid < 2.3.4 - Authenticated Stored XSS
In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img…
-
Unscored —
WP Config File Editor <= 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Config File Editor WordPress plugin through 1.7.1 was affected by an Authenticated Stored Cross-Site Scripting (XSS) vulnerability.