9 September 2021

6 results · Clear filters · Feed

• Critical 9.9
  CVE-2021-32724 Public exploit

  check-spelling workflow vulnerable to GITHUB_TOKEN leakage via symlink attack

  check-spelling is a github action which provides CI spell checking. In affected versions and for a repository with the [check-spelling action](https://github.com/marketplace/actions/check-spelling) enabled that triggers on `pull_request_target` (or `schedule`…

  check-spelling check-spelling check-spelling/check-spelling GitHub Actions
  Sep 9, 2021
• Medium 4.0
  CVE-2021-25461 Public exploit

  An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow.

  Samsung Mobile Samsung Mobile Devices
  Sep 9, 2021
• Critical 9.8
  CVE-2021-38540 Public exploit EPSS 81%

  Apache Airflow: Variable Import endpoint missed authentication check

  The variable import endpoint was not protected by authentication in Airflow >=2.0.0, <2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclo…

  Apache Software Foundation Apache Airflow apache-airflow PyPI
  Sep 9, 2021
• Unscored —
  CVE-2021-40223 Public exploit

  Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configu…

  Sep 9, 2021
• Unscored —
  CVE-2021-40222 Public exploit

  Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code exe…

  Sep 9, 2021
• Medium 6.7
  CVE-2021-1961 Public exploit

  Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdra…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Sep 9, 2021