Archive
August 2021
Vulnerabilities first published in this month (UTC), newest first.
2,107 results · Feed
-
Unscored —
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.
-
High 8.8
A use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSl…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management A…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management A…
-
Unscored —
Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potent…
-
Unscored —
An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failure…
-
Unscored —
Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the pote…
-
Unscored —
Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause…
-
Unscored —
Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered d…
-
Unscored —
A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable cras…
-
Unscored —
A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note…
-
Unscored —
After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be dis…
-
Unscored —
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memor…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed e…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed e…
-
Low 3.5
Rapid7 Velociraptor Notebooks Authenticated Persistent XSS
Rapid7 Velociraptor 0.5.9 and prior is vulnerable to a post-authentication persistent cross-site scripting (XSS) issue, where an authenticated user could abuse MIME filetype sniffing to embed executable code on a malicious upload. This issue was fixed in vers…
-
High 8.1
A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767.…
-
Unscored —
A remote code execution (RCE) in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code vi…
-
Critical 9.0
An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry®…
-
Unscored —
Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacke…
-
Unscored —
An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that …
-
Unscored —
An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. An HT…
-
Unscored —
An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situati…
-
Unscored —
In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to …
-
Unscored —CVE-2021-0640 Public exploit
In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could…
-
Unscored —
In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
Unscored —
In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
Unscored —
In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa…
-
Unscored —
In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa…
-
Unscored —
In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa…
-
Unscored —
In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
Unscored —
In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa…
-
Unscored —
In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa…
-
Medium 5.5
In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifier…
-
Medium 5.5
In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permi…
-
Unscored —
In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcas…
-
Unscored —
In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiv…
-
Medium 5.5
In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This c…
-
Unscored —CVE-2021-0519 Public exploit
In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This c…
-
Unscored —
In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to loca…