Archive
August 2021
Vulnerabilities first published in this month (UTC), newest first.
2,107 results · Feed
-
Medium 5.3
Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault
HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser. Fixed in 1.8.0 and pending 1.7.4 / 1.6.6 releases.
-
High 7.8
NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared …
-
Unscored —
The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) regi…
-
Unscored —
The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to imp…
-
Unscored —
The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user (with Adm…
-
Unscored —
The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.…
-
Unscored —
The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code informati…
-
Unscored —
The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due …
-
Unscored —
The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking at…
-
Unscored —
The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In…
-
Unscored —
The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system inf…
-
Unscored —
The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modif…
-
High 7.5
XML External Entity Reference
An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import.
-
Unscored —
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) u…
-
Medium 4.3
Information exposure in Discourse
Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a user's read state for a topic such as the last read post number and the notification level is exposed.
-
Medium 5.3
Re-use of email tokens in Discourse
Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an existing account on a Discourse site an email token is generated as part of the email verification …
-
Unscored —CVE-2021-38619 Public exploit
openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can condu…
-
Unscored —
The remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts in netless Agora Flat Server before 2021-07-3…
-
Unscored —CVE-2021-38583 Public exploit
openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting …
-
Unscored —
A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_A…
-
Unscored —
" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"
-
Medium 4.6
On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack.
-
Unscored —
A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post a…
-
Unscored —CVE-2021-37344 EPSS 97%
Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of …
-
Unscored —
Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from th…
-
Unscored —CVE-2021-37346 EPSS 74%
Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation…
-
Unscored —
Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the …
-
Unscored —
Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index…
-
Unscored —
Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input …
-
Unscored —CVE-2021-37350 EPSS 79%
Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper …
-
Unscored —
Nagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated users to access guarded…
-
Unscored —
An open redirect vulnerability exists in Nagios XI before version 5.8.5 that could lead to spoofing. To exploit the vul…
-
Unscored —
Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in table_population.php.
-
Unscored —
A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls i…
-
Medium 6.6
Use after free and segfault in shape inference functions in TensorFlow
TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions (such as `MutableHashTableShape`) produce extra output information in the form of a `ShapeAndType` struct. The shapes embe…
-
High 7.3
Execution of JavaScript code using malformed HTML in ckeditor
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objec…
-
Critical 9.3CVE-2021-37678 Public exploit
Arbitrary code execution due to YAML deserialization
TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be tricked to perform arbitrary code execution when deserializing a Keras model from YAML format. The [implementation](https://github.com/tens…
-
Medium 5.5
Segfault on strings tensors with mistmatched dimensions in TensorFlow
TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, `C.TF_TString_Dealloc` is called during garbage collection within …
-
Medium 5.5
Crash in NMS ops caused by integer conversion to unsigned in TensorFlow
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial of service in applications serving models using `tf.raw_ops.NonMaxSuppressionV5` by triggering a division by 0. The [implementation](https…
-
Medium 5.5
`CHECK`-fail in `MapStage` in TensorFlow
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a `CHECK`-fail in `tf.raw_ops.MapStage`. The [implementation](https://github.com/tensorflow/tensorflow/blob/460e000de3a…