Archive
11 August 2021
Vulnerabilities first published on this day (UTC), newest first.
24 results · Clear filters · Feed
-
Medium 6.9
Open Redirect in Next.js versions below 11.1.0
Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when pages/_error.js was statically generated allowing an open redirect to occur to an external site. In gene…
-
Medium 4.4
NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to c…
-
Medium 4.7
NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unaut…
-
Medium 5.5
NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to comple…
-
Medium 6.7
Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an i…
-
Medium 5.6
Prototype Pollution
All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.
-
Medium 5.9
PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage
Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and confi…
-
Medium 4.2
PAN-OS: Weak Cryptography Used in Web Interface Authentication
A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long du…
-
Medium 6.8
PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal
An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentic…
-
Medium 4.9
PAN-OS: OS Command Argument Injection in Web Interface
An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.…
-
Medium 5.3
IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force…
-
Medium 4.3
IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in f…
-
Medium 4.7
IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier f…
-
Medium 6.1
Securimage-WP-Fixed <= 3.5.4 Reflected Cross-Site Scripting
The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/securimage-wp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5.4.
-
Medium 6.9
Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 befor…
-
Medium 6.3
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6250 before 1.0.4.36,…
-
Medium 6.6
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.52,…
-
Medium 6.1
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.50,…
-
Medium 6.8
NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user.
-
Medium 6.9
NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user.
-
Medium 4.5
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 befor…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befo…
-
Medium 4.3
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0…
-
Medium 4.7
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.…