Archive
13 August 2021
Vulnerabilities first published on this day (UTC), newest first.
11 results · Clear filters · Feed
-
High 7.8
A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs…
-
High 7.8
Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the comma…
-
High 7.8
Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the comma…
-
High 7.8
A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs…
-
High 8.1
A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem func…
-
High 8.1
A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ …
-
High 7.5
Improper Resource Shutdown or Release in TYPO3 extension
The deferred_image_processing (aka Deferred image processing) extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption.
-
High 7.5
Sensitive Data Exposure in miniorange_saml
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.
-
High 8.5
Cross-site Scripting in TYPO3 extension
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.
-
High 7.8
NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared …
-
High 7.5
XML External Entity Reference
An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import.