Archive
June 2021
Vulnerabilities first published in this month (UTC), newest first.
1,711 results · Feed
-
Medium 5.4
Admin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label
The Admin Columns WordPress plugin before 4.3 and Admin Columns Pro WordPress plugin before 5.5.1 do not sanitise and escape its Label settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the …
-
Unscored —CVE-2021-24364 Scanner template
Jannah < 5.4.4 - Reflected Cross-Site Scripting (XSS)
The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.
-
Unscored —
GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections
In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues.
-
Unscored —
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Menu Label' field parameter.
-
Unscored —
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Singular Label' field parameter.
-
Unscored —
An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132.
-
High 8.1
XSS Vulnerability in mongo-express
mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a cell grows larger than supported size, clicking on a row wi…
-
Medium 6.5
Form validation can be skipped
neos/forms is an open source framework to build web forms. By crafting a special `GET` request containing a valid form state, a form can be submitted without invoking any validators. Form state is secured with an HMAC that is still verified. That means that t…
-
Unscored —
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Adm…
-
Unscored —
Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.
-
Unscored —
malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds
Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code i…
-
Unscored —
In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local es…
-
Unscored —
In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to loca…
-
Unscored —
In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local es…
-
Unscored —
In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local es…
-
Unscored —
In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escal…
-
Unscored —
In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to loca…
-
Unscored —
In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local es…
-
Unscored —
In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local es…
-
Unscored —
In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local …
-
Unscored —CVE-2021-0506 Public exploit
In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay…
-
Unscored —CVE-2021-0507 Public exploit
In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —CVE-2021-0516 Public exploit
In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. Thi…
-
Unscored —
In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could …
-
Unscored —
In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This …
-
Unscored —
In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a l…
-
Unscored —CVE-2021-0511 Public exploit
In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This…
-
Unscored —CVE-2021-0510 Public exploit
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead…
-
Unscored —CVE-2021-0509 Public exploit
In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead t…
-
Unscored —CVE-2021-0508 Public exploit
In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to l…
-
Unscored —CVE-2021-0520 Public exploit
In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condit…
-
Unscored —
In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission chec…
-
Unscored —CVE-2021-0522 Public exploit
In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. T…
-
Unscored —
In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to …
-
Unscored —
In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffe…
-
Unscored —CVE-2021-0478 Public exploit
In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This c…
-
Unscored —CVE-2021-0513 Public exploit
In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission b…
-
High 7.5
ReDOS in IS-SVG
A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.
-
Medium 5.3
Regular Expression Denial of Service (ReDOS)
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.
-
Unscored —
Cross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html.