Archive
June 2021
Vulnerabilities first published in this month (UTC), newest first.
1,711 results · Feed
-
Unscored —
An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP…
-
Unscored —
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_…
-
Critical 9.8
Primion-Digitek Secure 8 SQL injection vulnerability
Secure 8 (Evalos) does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database.
-
Unscored —
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker …
-
Unscored —
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a …
-
High 8.8
B426 Credential Disclosure
When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of …
-
High 8.0
B426 Web Configuration Authentication Bypass
This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and …
-
Unscored —
VMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in the VM3DMP driver. A ma…
-
Unscored —
No filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform …
-
Unscored —
A cross-site scripting (XSS) vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code executi…
-
Unscored —
CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGIN_PAGE_DISCLAIMER parameter.
-
Unscored —
An issue was discovered in Cleo LexiCom 5.5.0.0. The requirement for the sender of an AS2 message to identify themselve…
-
Unscored —
An issue was discovered in Cleo LexiCom 5.5.0.0. Within the AS2 message, the sender can specify a filename. This filena…
-
Unscored —
An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag manage…
-
Medium 6.1
MCU Technologies MCUsystem - Reflected XSS
The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks.
-
Critical 9.8CVE-2021-21669 EPSS 26%
XXE vulnerability in Jenkins Generic Webhook Trigger Plugin
Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
-
Medium 5.8
Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows rem…
-
Critical 9.9
Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management co…
-
Critical 9.9
Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows rem…
-
Medium 5.0
Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.1…
-
Medium 5.8
Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attac…
-
Unscored —
Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files …
-
Medium 6.8
Authentication granted with multiple firewalls
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. A vulnerability related to firewall authentication is in Symfony starting with version 5.3.0 and prior to 5.3.2. When an application defines multiple firewalls, …
-
Unscored —
In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the …
-
Unscored —
In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized chang…
-
Medium 4.1
Malicious Android application can crash the Nextcloud Android Client
Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client due to an uncaught exception. The vulnerability is patched in version 3.15.1.
-
Low 3.9
Malicious Android app could access Shared Preferences of the Nextcloud Android client
Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.16.1, a malicious app on the same device could have gotten access to the shared preferences of the Nextcloud Android application. This required user-interaction as a victim had …
-
Medium 6.5
Improper network isolation in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.
-
Medium 6.1
MantisBT allows XSS in manage_custom_field_edit_page.php
An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.
-
Medium 5.4
Improper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks
Wagtail is an open source content management system built on Django. A cross-site scripting vulnerability exists in versions 2.13-2.13.1, versions 2.12-2.12.4, and versions prior to 2.11.8. When the `{% include_block %}` template tag is used to output the val…
-
Medium 5.6
Prototype Pollution
All versions of package lutils are vulnerable to Prototype Pollution via the main (merge) function.
-
Unscored —
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.
-
Medium 6.8
IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitiv…
-
Unscored —
An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login P…
-
Unscored —
Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-con…
-
Unscored —
A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attack…
-
Unscored —
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 bec…
-
Unscored —
Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificat…
-
Unscored —
Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API be…
-
Unscored —
A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resu…