Archive
July 2021
Vulnerabilities first published in this month (UTC), newest first.
1,584 results · Feed
-
Unscored —
In onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest users to view and modify W…
-
Unscored —
In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check.…
-
Unscored —
In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check. This could lead to loc…
-
Unscored —
In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account name…
-
Unscored —CVE-2021-0594 Public exploit
In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validati…
-
Unscored —
In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broad…
-
Unscored —
A Cross-site scripting (XSS) vulnerability in the "View in Browser" feature in Elements-IT HTTP Commander 5.3.3 allows …
-
Unscored —
In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi …
-
Unscored —
In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to l…
-
Unscored —
In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permi…
-
Unscored —
In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds c…
-
Unscored —
In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to …
-
Unscored —
In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable Pen…
-
Unscored —
An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated …
-
Unscored —
Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalati…
-
Unscored —
Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enab…
-
High 7.5
Password Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS Application
Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and pri…
-
Unscored —
In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level (ad…
-
Unscored —
In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) …
-
Unscored —
The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due…
-
Medium 5.4
SAP Lumira Server version 2.4 does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (X…
-
Medium 4.5
SAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals sensitive information …
-
Medium 5.4
SAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32U…
-
Low 3.5
When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator ap…
-
Medium 5.3
SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.2…
-
Medium 6.5
A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 74…
-
High 7.5
SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted source…
-
Medium 6.5
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to ext…
-
Medium 6.8
A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with h…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted source…
-
High 7.6
SAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perfo…
-
Medium 4.3
Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker …
-
Unscored —
A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnera…
-
Critical 9.8
Prototype Pollution in putil-merge
Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to remote code execution.
-
Medium 5.5
Apache Ant ZIP, and ZIP based, archive denial of service vulerability
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly …
-
Medium 5.5
Apache Ant TAR archive denial of service vulnerability
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.…
-
Medium 6.1
HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attac…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1…