Archive
11 August 2021
Vulnerabilities first published on this day (UTC), newest first.
117 results · Feed
-
Medium 6.9
Open Redirect in Next.js versions below 11.1.0
Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when pages/_error.js was statically generated allowing an open redirect to occur to an external site. In gene…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883. Attackers can c…
-
High 7.1
Sensitive information leak in Welcome of tmerc-cogs
tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific membership event message. Issue is patched in commit d63c49b4cfc…
-
Unscored —
The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks (SEC-585).
-
Unscored —
The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585).
-
Unscored —
In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589).
-
Unscored —
In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586).
-
Unscored —
In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587).
-
Unscored —
In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588).
-
High 7.1
Sensitive information leak in MassDM of tmerc-cogs
tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific MassDM message. Issue is patched in commit 92325be650a6c17940cc5…
-
Unscored —
In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584).
-
High 8.0
Privilege escalation via form generator
Contao is an open source CMS that allows creation of websites and scalable web applications. In affected versions it is possible to gain privileged rights in the Contao back end. Installations are only affected if they have untrusted back end users who have a…
-
Unscored —
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::Conf…
-
High 7.2
PHP file inclusion via insert tags
Contao is an open source CMS that allows you to create websites and scalable web applications. In affected versions it is possible to load PHP files by entering insert tags in the Contao back end. Installations are only affected if they have untrusted back en…
-
Medium 4.4
NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to c…
-
Medium 4.7
NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unaut…
-
Medium 5.5
NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to comple…
-
Medium 6.7
Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an i…
-
High 7.1
NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change i…
-
High 7.2
NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera …
-
High 7.3
NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack…
-
High 7.8
NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access contro…
-
High 7.8
NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, w…
-
Unscored —
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in whi…
-
Unscored —
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read…
-
Unscored —
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary …
-
Unscored —
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption dur…
-
Unscored —
An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing …
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of …
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive functio…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (du…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 an…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the …
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a Co…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the e…
-
Unscored —
An arbitrary file deletion vulnerability exists within Maccms10.
-
Unscored —
A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute ar…
-
Unscored —
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix w…
-
Unscored —
UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the …
-
Unscored —
In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in P…