Archive
August 2021
Vulnerabilities first published in this month (UTC), newest first.
2,107 results · Feed
-
Unscored —
There is missing input validation of host names displayed in OpenWrt before 19.07.8. The Connection Status page of the …
-
High 8.8
A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality …
-
High 8.8
A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of…
-
High 7.8
A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionali…
-
Unscored —
common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash…
-
Unscored —
crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest …
-
Unscored —
A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute…
-
Unscored —
Panic on inputs with large exponents in math/big
In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.
-
Unscored —
Attacker can drop certain headers in net/http/httputil
In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
-
Unscored —
Improper sanitization when resolving values from DNS in net
Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.
-
Critical 9.8
The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the us…
-
Critical 9.8
Data race in crossbeam-deque
crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions prior to 0.7.4 and 0.8.0, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of oth…
-
Medium 6.5
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1.2.0 have an Open Redirect vulnerability. Various parts of Plone use the 'is url in portal' check for security, mostly to see if it is safe…
-
Unscored —
A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can l…
-
Unscored —
There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploita…
-
Unscored —
There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may…
-
Unscored —
There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Medium —
Attack on Kubernetes via Misconfigured Argo Workflows
### Impact Users running using the Argo Server with `--auth-mode=server` (which is the default < v3.0.0) AND have exposed their UI to the Internet may allow remote users to execute arbitrary code on their cluster, e.g. crypto-mining. ### Resolution * Do not e…
-
Unscored —
There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Unscored —
There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Unscored —
There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of …
-
Unscored —
There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vu…
-
Unscored —
There is a Configuration Defect Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may af…
-
Unscored —
There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lea…
-
Unscored —
There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability …
-
Unscored —
There is an Incorrect Calculation of Buffer Size Vulnerability in Huawei Smartphone.Successful exploitation of this vul…
-
Unscored —
There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may ca…
-
Unscored —
There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause…
-
Unscored —
There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause…
-
Unscored —
There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may…
-
Unscored —
There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may…
-
Unscored —
There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vu…
-
Unscored —
There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus…
-
Unscored —
There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause…
-
Unscored —
There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful explo…
-
Unscored —
There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may…
-
Unscored —
There is an Integer Underflow (Wrap or Wraparound) Vulnerability in Huawei Smartphone.Successful exploitation of this v…
-
Unscored —
There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Medium 4.9
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authent…
-
High 8.0
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authent…