Archive
June 2021
Vulnerabilities first published in this month (UTC), newest first.
1,711 results · Feed
-
Unscored —
Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive information (remote).
-
Critical 9.8
Craft CMS Remote Code Injection
An issue was discovered in Craft CMS before 3.6.7. In some circumstances, a potential Remote Code Execution vulnerability existed on sites that did not restrict administrative changes (if an attacker were somehow able to hijack an administrator's session).
-
Medium 6.1
Craft CMS Cross-site Scripting Vulnerability
An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads.
-
Unscored —CVE-2021-35956 Public exploit
Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote au…
-
High 7.5
XML2Dict XML Entity Expansion Vulnerability
XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service.
-
Unscored —
Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.
-
Unscored —
The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication byp…
-
Unscored —
xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary…
-
Unscored —
inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operat…
-
Medium 6.3
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length c…
-
Medium 6.3
Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which …
-
Medium 6.4
Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or es…
-
Medium 6.7
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on …
-
Medium 6.7
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of…
-
High 7.0
Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap meta…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restric…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restrict…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restrict…
-
High 7.7
Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which migh…
-
High 7.7
Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerabili…
-
High 7.9
Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening coul…
-
Critical 9.8
cryptctl: client side password hashing is equivalent to clear text password storage
A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Ser…
-
High 7.8
arpwatch: Local privilege escalation from runtime user to root
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run…
-
Unscored —
Dynamic stack buffer overflow in cachekey plugin
Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
-
Unscored —
Reading HTTP/2 frames too many times
Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
-
Unscored —
Specific sequence of HTTP/2 frames can cause ATS to crash
Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
-
Medium 6.1
Plone has stored XSS in folder contents
In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field.
-
Unscored —
TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_fi…
-
Critical —
Denial of service in go-ethereum due to CVE-2020-28362
### Impact Versions of Geth built with Go `<1.15.5` or `<1.14.12` are most likely affected by a critical DoS-related security vulnerability. The golang team has registered the underlying flaw as ‘CVE-2020-28362’. We recommend all users to rebuild (ideally `v1…
-
Unscored —CVE-2021-35941 EPSS 13%
Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that c…
-
Unscored —
There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers w…
-
Unscored —
There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform …
-
Unscored —
There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict op…
-
Unscored —
There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O …
-
Medium 4.7
URL Redirection to Untrusted Site ('Open Redirect') in github.com/AndrewBurian/powermux
PowerMux is a drop-in replacement for Go's http.ServeMux. In PowerMux versions prior to 1.1.1, attackers may be able to craft phishing links and other open redirects by exploiting the trailing slash redirection feature. This may lead to users being redirected…
-
Unscored —
There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request …
-
Critical 9.9
Remote Code Execution Vulnerability in Session Storage
Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a malicious attacker can achieve Remote Code Execution (RCE) via a maliciously crafted Java deserialization gadget chain leveraged against the Ratpack session store. If one's appl…
-
Medium 6.5
Client side sessions should not allow unencrypted storage
Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the default configuration of client side sessions results in unencrypted, but signed, data being set as cookie values. This means that if something sensitive goes into the session…
-
Unscored —
Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessu…