Archive
11 August 2021
Vulnerabilities first published on this day (UTC), newest first.
117 results · Feed
-
Unscored —
In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and g…
-
Unscored —
In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged use…
-
Unscored —
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by dir…
-
Unscored —
In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in …
-
Unscored —
SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in Se…
-
Unscored —
In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and g…
-
Unscored —
In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
-
Unscored —
In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure D…
-
Unscored —
In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS install…
-
Unscored —
In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives…
-
Unscored —
The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference…
-
Unscored —
Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service o…
-
Unscored —
The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer derefere…
-
Unscored —
The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) …
-
Unscored —
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table i…
-
Unscored —
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mish…
-
Unscored —
An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers …
-
Unscored —CVE-2021-38085 Public exploit
The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer pr…
-
Medium 5.6
Prototype Pollution
All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.
-
High 8.7
Code injection issue for java-spring-cloud-stream-template
@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. T…
-
High 8.8
PAN-OS: OS Command Injection Vulnerability in Web Interface
An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.…
-
Medium 5.9
PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage
Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and confi…
-
Medium 4.2
PAN-OS: Weak Cryptography Used in Web Interface Authentication
A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long du…
-
Medium 6.8
PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal
An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentic…
-
Medium 4.9
PAN-OS: OS Command Argument Injection in Web Interface
An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.…
-
Medium 5.3
IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force…
-
Medium 4.3
IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in f…
-
Medium 4.7
IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier f…
-
Unscored —
TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power…
-
Unscored —
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on t…
-
Unscored —
Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power …
-
Unscored —
CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, …
-
Unscored —
Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the …
-
Unscored —
JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a t…
-
Unscored —
MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to …
-
Medium 6.1CVE-2021-34640 Scanner template
Securimage-WP-Fixed <= 3.5.4 Reflected Cross-Site Scripting
The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/securimage-wp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5.4.
-
Unscored —
In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptog…
-
Unscored —
Improper access control in kernel mode driver for some Intel(R) NUC 9 Extreme Laptop Kits before version 2.2.0.20 may a…
-
Unscored —
Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.…
-
Unscored —
Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allo…