Archive
13 July 2021
Vulnerabilities first published on this day (UTC), newest first.
139 results · Feed
-
Unscored —
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dere…
-
Unscored —
A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while run…
-
Unscored —
An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, le…
-
Unscored —
A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS).
-
Unscored —
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leadin…
-
Unscored —
An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, le…
-
Medium 5.4
Certificate pinning is not enforced on the web socket connection
Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users run…
-
Unscored —
OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. A malicious actor wi…
-
Unscored —CVE-2021-21994 Public exploit
SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with ne…
-
Unscored —
VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A mal…
-
Unscored —
In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.
-
Medium 6.1
LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView.
-
Unscored —
Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat pr…
-
Medium 4.3
IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed techni…
-
High 8.8
IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper applica…
-
High 7.5
IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data store…
-
Medium 5.9
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to d…
-
Medium 5.4
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…
-
Medium 5.4
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…
-
Medium 5.4
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…
-
Medium 5.4
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…
-
Medium 5.4
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…
-
Medium 5.4
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…
-
Medium 5.4
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…
-
Medium 5.9
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to d…
-
Unscored —
Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a De…
-
Unscored —
Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cau…
-
Unscored —
Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers t…
-
Unscored —
Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE_2V09, allows remote attackers to…
-
Unscored —
Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafte…
-
Unscored —
Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of service. This issue i…
-
Unscored —
Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute a…
-
Unscored —
Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute …
-
Unscored —
Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execut…
-
Unscored —
An issue was discovered in Echo ShareCare 8.15.5. The UnzipFile feature in Access/EligFeedParse_Sup/UnzipFile_Upd.cfm i…
-
Unscored —
An issue was discovered in Echo ShareCare 8.15.5. The file-upload feature in Access/DownloadFeed_Mnt/FileUpload_Upd.cfm…
-
Unscored —
An issue was discovered in Echo ShareCare 8.15.5. It does not perform authentication or authorization checks when acces…
-
Unscored —
An issue was discovered in Echo ShareCare 8.15.5. The TextReader feature in General/TextReader/TextReader.cfm is suscep…
-
Unscored —
Echo ShareCare 8.15.5 is susceptible to SQL injection vulnerabilities when processing remote input from both authentica…
-
Unscored —
SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having th…