Archive
7 July 2021
Vulnerabilities first published on this day (UTC), newest first.
26 results · Clear filters · Feed
-
Medium 6.8
A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitG…
-
Medium 5.9
Integer Overflow in Chunked Transfer-Encoding
hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper's HTTP server and client code had a flaw that could trigger an integer overflow when decoding chunk sizes that are too big. This allows possible data loss, or if combined with an upstream …
-
Medium 4.8
Cross-site scripting in LavaLite-CMS
Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature.
-
Medium 4.4
IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged user to obtain sensitive…
-
Medium 6.5
IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requi…
-
Medium 4.3
IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detaile…
-
Medium 5.9
IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacke…
-
Medium 5.9
IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could al…
-
Medium 6.3
IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an au…
-
Medium 6.5CVE-2021-32537 Public exploit
Realtek High definition audio Windows driver crashed
Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed.
-
Medium 5.3
QSAN Storage Manager - Exposure of Sensitive Information to an Unauthorized Actor
Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system information without permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document.
-
Medium 6.5
QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.
-
Medium 5.3
QSAN Storage Manager - Exposure of Information Through Directory Listing
Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.
-
Medium 4.3
QSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList function
QSAN Storage Manager through directory listing vulnerability in ViewBroserList allows remote authenticated attackers to list arbitrary directories via the file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage…
-
Medium 4.3
QSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus function
QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vulnerability has been solved with the updated version of QSA…
-
Medium 6.5
QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileviewDoc function
Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has been solved with the upda…
-
Medium 6.5
QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileStreaming function
Absolute Path Traversal vulnerability in FileStreaming in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has been solved with the up…
-
Medium 6.5
QSAN Storage Manager - Absolute Path Traversal via FileDownload function
Absolute Path Traversal vulnerability in FileDownload in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manage…
-
Medium 6.5
QSAN Storage Manager - Absolute Path Traversal via GetImage function
Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3…
-
Medium 4.3
An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details
-
Medium 6.4
WP Upload Restriction <= 2.2.3 - Authenticated Stored Cross-Site Scripting
A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior.
-
Medium 4.3
WP Upload Restriction <= 2.2.3 - Missing Access Control in getSelectedMimeTypesByRole function
A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to view custom extensions added by administrators. This issue affects versions 2.2.3 and prior.
-
Medium 4.3
WP Upload Restriction <= 2.2.3 - Missing Access Control in deleteCustomType function
A vulnerability in the deleteCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to delete custom extensions added by administrators. This issue affects versions 2.2.3 and prior.
-
Medium 4.7
Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross…
-
Medium 4.9
Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability …
-
Medium 6.1
A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker t…