Archive
7 August 2021
Vulnerabilities first published on this day (UTC), newest first.
12 results · Feed
-
Unscored —
Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ss…
-
Unscored —
Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers.
-
Unscored —
Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py.
-
Unscored —
Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to b…
-
Unscored —
In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when m…
-
Unscored —
Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext c…
-
Unscored —
Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in…
-
Unscored —
In certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the MOVEit Transfer web app…
-
Unscored —
In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untr…
-
Critical 9.8
Obsidian does not require user confirmation for non-http/https URLs.
Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs.
-
High 7.8CVE-2021-38185 Public exploit
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_…
-
Unscored —
library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginn…