Archive
27 July 2021
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —
Telegram Web K Alpha 0.6.1 allows XSS via a document name.
-
Unscored —
In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing …
-
Unscored —
In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing …
-
Unscored —CVE-2021-37593 Public exploit
PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious S…
-
Unscored —
A stored cross site scripting (XSS) vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrar…
-
Unscored —
A stored cross site scripting (XSS) vulnerability in /app/form_add/of S-CMS PHP v3.0 allows attackers to execute arbitr…
-
Unscored —
A cross site scripting (XSS) vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML …
-
Unscored —
A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modificati…
-
Unscored —
In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data.
-
Unscored —
In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.
-
Medium 6.5
Misinterpretation of malicious XML input in xmldom
xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may l…
-
Medium 4.3
Post creator of a whisper post can be revealed to non-staff users in Discourse
Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper post being revealed to non-staff users. 1: Staff users that creates a whisper post in a personal message is revealed to n…
-
Medium 4.3
WOPI API not protected by credentials/IP check
Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI ("Web Application Open Platform Interface") protocol to communicate with the Collabora Editor, the communication between these two services was not protected by a cre…
-
Medium 5.3
Directory Traversal in isomorphic-git
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.
-
Unscored —
Cross Site Scripting (XSS) vulnerabiity in YzmCMS 5.2 via the site_code parameter in admin/index/init.html.
-
Unscored —
SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php..
-
High 7.5CVE-2021-28966 EPSS 58%
Tempfile on Windows path traversal vulnerability
In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.
-
Unscored —
The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node…
-
Unscored —
In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet wit…
-
Unscored —
SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned/add.htm.
-
Unscored —
engineercms 1.03 is vulnerable to Cross Site Scripting (XSS). There is no escaping in the nickname field on the user li…
-
Unscored —
On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be cha…
-
Unscored —
A logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before 12.5.23094 allowed to bypass Windo…
-
High 8.8
Adobe InDesign CoolType out of bounds write vulnerability could lead to arbitrary stack manipulation
Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitat…
-
Unscored —CVE-2021-35479 EPSS 13%
Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log functi…
-
Unscored —CVE-2021-35478 EPSS 77%
Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function.…
-
High 8.8
Improper Privilege Management in Neo4j Graph Database
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges.
-
Medium 5.4
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-…
-
High 7.1
IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) at…
-
Unscored —
Concrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable code is located within the controllers/single_page/…
-
Unscored —CVE-2021-36754 EPSS 65%
PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE…
-
Unscored —
An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or sp…
-
Unscored —
Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s paramet…
-
High 7.1CVE-2021-32610 EPSS 73%
Directory Traversal in Archive_Tar
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
-
Unscored —
An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x befo…
-
Unscored —
An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must…
-
Unscored —
OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash col…
-
Unscored —
OX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash collisions can occur, due…
-
Unscored —
OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur,…
-
Unscored —
The LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the privileges of any user to LP…