26 August 2021

61 results · Feed

• Medium 6.5
  CVE-2021-3734

  Improper Restriction of Rendered UI Layers or Frames in yourls/yourls

  yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames

  YOURLS yourls/yourls yourls/yourls Packagist
  Aug 26, 2021
• Unscored —
  CVE-2021-38559

  DigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1 parameter.

  hoteldruid hoteldruid Debian Ubuntu
  Aug 26, 2021
• Unscored —
  CVE-2021-27944

  Several high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs do not enforce access con…

  Aug 26, 2021
• Unscored —
  CVE-2020-14160

  An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote …

  Aug 26, 2021
• Unscored —
  CVE-2020-14161

  It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via the /conve…

  Aug 26, 2021
• Unscored —
  CVE-2020-19822

  A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbi…

  Aug 26, 2021
• Unscored —
  CVE-2020-19821

  A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the or…

  Aug 26, 2021
• Unscored —
  CVE-2020-19705

  thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.

  Aug 26, 2021
• Medium 6.1
  CVE-2020-19709

  Cross-site scripting in feehicms

  Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.

  feehi/feehicms Packagist
  Aug 26, 2021
• Unscored —
  CVE-2020-19704

  A stored cross-site scripting (XSS) vulnerability via ResourceController.java in spring-boot-admin as of 20190710 allow…

  Aug 26, 2021
• Unscored —
  CVE-2020-19703

  A cross-site scripting (XSS) vulnerability in the referer parameter of Dzzoffice 2.02 allows attackers to execute arbit…

  Aug 26, 2021
• Unscored —
  CVE-2021-20815

  Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r.4903 and earlier (Movab…

  Six Apart Movable Type
  Aug 26, 2021
• Unscored —
  CVE-2021-20814

  Cross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of Movable Type (Movable …

  Six Apart Movable Type
  Aug 26, 2021
• Unscored —
  CVE-2021-20813

  Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7 r.4903 and earlier (M…

  Six Apart Movable Type
  Aug 26, 2021
• Unscored —
  CVE-2021-20812

  Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and…

  Six Apart Movable Type
  Aug 26, 2021
• Unscored —
  CVE-2021-20811

  Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable…

  Six Apart Movable Type
  Aug 26, 2021
• Unscored —
  CVE-2021-20810

  Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Mov…

  Six Apart Movable Type
  Aug 26, 2021
• Unscored —
  CVE-2021-20809

  Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable Type (Movable Type 7 r…

  Six Apart Movable Type
  Aug 26, 2021
• Unscored —
  CVE-2021-20808

  Cross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 …

  Six Apart Movable Type
  Aug 26, 2021
• Unscored —
  CVE-2021-20793

  Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP …

  Sony The installers of multiple Sony products
  Aug 26, 2021
• Unscored —
  CVE-2021-40145

  gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's po…

  libgd2 libgd2 gd gd Debian Ubuntu Azure Linux Alpine
  Aug 26, 2021