Archive
25 August 2021
Vulnerabilities first published on this day (UTC), newest first.
75 results · Feed
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
Critical 9.6
Remote code execution in Binderhub
BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments from code repositories. In affected versions a remote code execution vulnerability has been identified in BinderHub, where providing Binde…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of COD…
-
Unscored —
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This …
-
Unscored —
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This …
-
Unscored —
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This …
-
Critical 9.6
Code injection in nbgitpuller
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2…
-
High 8.7
Cross-site scripting vulnerability in file upload
baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as…
-
Unscored —
Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'ch…
-
Unscored —
Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the …
-
Unscored —
Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive inform…
-
Unscored —
Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/…
-
Unscored —
The Webform module uses the [CKEditor](https://github.com/ckeditor/ckeditor4), library for WYSIWYG editing. CKEditor ha…
-
Unscored —
The *Admin Toolbar* (`admin_toolbar`) module extends the default toolbar provided by Drupal Core with various features …
-
Unscored —
The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service (…
-
Medium 4.3
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to 14.0.0), 2.0.0 prior to 3.0.0 (Vaadin 14.0.0 prior to 14.5.0), 3.0.0 through 4.0.1 (Vaadin 15.0.0 through 17.0.11), 14.5.0 through 14.6.7 …
-
Unscored —
Crate has been renamed to `cosmrs`
The `cosmos_sdk` crate, which provides a basic Rust SDK for the Cosmos ecosystem, has rebranded to “CosmRS” in the spirit of other projects like CosmJS and CosmWasm. You can find the new home here: https://github.com/cosmos/cosmos-rust/tree/main/cosmrs The ne…
-
High 8.1
An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticat…
-
Critical 10.0
An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remo…
-
Medium 6.5
An Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows remot…
-
Medium 5.9
A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remo…
-
Medium 6.8
A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote …
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL …
-
Unscored —
An issue was discovered in PrimeKey EJBCA before 7.6.0. As part of the configuration of the aliases for SCEP, CMP, EST,…
-
Unscored —
An issue was discovered in PrimeKey EJBCA before 7.6.0. When audit logging changes to the alias configurations of vario…
-
Unscored —
An issue was discovered in PrimeKey EJBCA before 7.6.0. CMP RA Mode can be configured to use a known client certificate…
-
Unscored —
An issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher, which is normally run to …
-
Unscored —
Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case (NSEC3 wi…
-
Unscored —
opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. For exa…
-
Unscored —
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a…