Archive
9 July 2021
Vulnerabilities first published on this day (UTC), newest first.
61 results · Feed
-
High 7.5
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted …
-
High 7.5
Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash
Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the `Data.init(base32Encoded:)` function opens up the potential for exposing server memory and/or crashing the server (Denial of Service) for applications where untrusted data can end up…
-
High 7.5CVE-2021-30201 EPSS 26%
Unauthenticated XML External Entity vulnerability in Kaseya VSA < v9.5.6
The API /vsaWS/KaseyaWS.asmx can be used to submit XML to the system. When this XML is processed (external) entities are insecurely processed and fetched by the system and returned to the attacker. Detailed description Given the following request: ``` POST /v…
-
Medium 6.5
(Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6
Semi-authenticated local file inclusion The contents of arbitrary files can be returned by the webserver Example request: `https://x.x.x.x/KLC/js/Kaseya.SB.JS/js.aspx?path=C:\Kaseya\WebPages\dl.asp` A valid sessionId is required but can be easily obtained via…
-
Critical 9.9
2FA bypass in Kaseya VSA <= v9.5.6
Kaseya VSA before 9.5.7 allows attackers to bypass the 2FA requirement. The need to use 2FA for authentication in enforce client-side instead of server-side and can be bypassed using a local proxy. Thus rendering 2FA useless. Detailed description --- During t…
-
Medium 5.4CVE-2021-30119 EPSS 59%
Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6
Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTa…
-
Critical 9.8
Unauthenticated Remote Code Execution in Kaseya VSA < v9.5.5
An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management (RMM) 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab/uploader.aspx is vulnerable to an unau…
-
Critical 9.8CVE-2021-30117 EPSS 72%
Authenticated SQL injection in Kaseya VSA < v9.5.6
The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId. Detailed description --- Given the following request: ``` GET /InstallTab/exportFldr.asp?fldrId=1’ HTTP/1.1 Host: 192.168.…
-
High 8.3
SQL Injection
This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.
-
High —
Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec
Mismanaged state in GRPCWebToHTTP2ServerCodec.swift in gRPC Swift 1.1.0 and 1.1.1 allows remote attackers to deny service by sending malformed requests.
-
High 7.5
Uncontrolled Resource Consumption in LengthPrefixedMessageReader
LengthPrefixedMessageReader in gRPC Swift 1.1.0 and earlier allocates buffers of arbitrary length, which allows remote attackers to cause uncontrolled resource consumption and deny service.
-
Medium —
Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec
HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption.
-
Unscored —
golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a tempora…
-
Unscored —
It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML…
-
High 7.5
Allocation of resources without limits or throttling in keycloak-model-infinispan
A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack.
-
Unscored —
An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc…
-
Unscored —
A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture …
-
Unscored —
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message bet…
-
Unscored —
Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that c…
-
High 8.1
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication res…
-
Critical 10.0
Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6
Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.…
KEV Nov 3, 2021