Archive
24 August 2021
Vulnerabilities first published on this day (UTC), newest first.
222 results · Feed
-
High 8.1CVE-2021-39156 Public exploit
Fragments in Path May Lead to Authorization Policy Bypass
Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio 1.11.0, 1.10.3 and below, and 1.9.7 and below contain a remotely exploitabl…
-
High 8.3
Authorization Policy Bypass Due to Case Insensitive Host Comparison
Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. According to [RFC 4343](https://datatracker.ietf.org/doc/html/rfc4343), Istio aut…
-
High 8.6
Incorrect handling of H/2 GOAWAY followed by SETTINGS frames
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The c…
-
High 8.6
Continued processing of requests after locally generated response
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions after Envoy sends a locally generated response it must stop further processing of request or response data. However when loca…
-
High 8.6
Incorrectly handling of URI '#fragment' element as part of the path element
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy incorrectly handled a URI '#fragment' element as part of the path element. Envoy is configured with an RBAC filter for …
-
Medium 5.8
Excessive CPU utilization when closing HTTP/2 streams
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy’s procedure for resetting a HTTP/2 stream has O(N^2) complexity, leading to high CPU utilization when a large number of…
-
High 8.6
Incorrect concatenation of multiple value request headers in ext-authz extension
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions when ext-authz extension is sending request headers to the external authorization service it must merge multiple value header…
-
Unscored —
The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename…
-
Unscored —
EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via t…
-
Unscored —
An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in …
-
Unscored —
An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2…
-
High 7.5CVE-2021-31010 Exploited
A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Cata…
KEV Aug 25, 2022 -
Unscored —
Multiple issues were addressed by removing HDF5. This issue is fixed in iOS 15.2 and iPadOS 15.2, macOS Monterey 12.1. …
-
Unscored —
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 15.1, tvOS 15.1, iOS …
-
Unscored —
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.…
-
Unscored —
Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7,…
-
Unscored —
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, m…
-
Unscored —
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5.…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.0.1, macOS…
-
Unscored —
An access issue was addressed with improved access restrictions. This issue is fixed in iOS 15 and iPadOS 15. An attack…
-
Unscored —
A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.…
-
Unscored —
The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be…
-
Unscored —
A S/MIME issue existed in the handling of encrypted email. This issue was addressed with improved selection of the encr…
-
Unscored —
A S/MIME issue existed in the handling of encrypted email. This issue was addressed by not automatically loading some M…
-
Unscored —
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and i…
-
Unscored —
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, ma…
-
Unscored —
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.0.1. A malici…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchO…
-
Unscored —
This issue was addressed with improved handling of file metadata. This issue is fixed in iOS 15.2 and iPadOS 15.2. A us…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A m…
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.1, Security Update 2021-…
-
Unscored —
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.1. A device m…
-
Unscored —
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.…
-
Unscored —
A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15…
-
Unscored —
A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Saf…
-
High 7.8CVE-2021-30983 Exploited
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. A…
KEV Jun 27, 2022 -
Unscored —
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-…
-
Unscored —
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Upd…