Archive
9 September 2021
Vulnerabilities first published on this day (UTC), newest first.
140 results · Feed
-
High 8.8
handysoft groupware arbitrary file download and execution vulnerability
An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download URL or downloaded file hash.
-
High 8.8
NEXACRO14 Runtime arbitrary file download and execution vulnerability
Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of file download URL or …
-
High 8.8
Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker t…
-
Critical 9.6
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditi…
-
High 8.4
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditi…
-
High 7.2
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditi…
-
Medium 4.4
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditi…
-
Medium 6.3
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account password…
-
High 8.7
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords…
-
Unscored —
Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS …
-
Unscored —
Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS …
-
Unscored —
Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an aut…
-
Unscored —
Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an aut…
-
Unscored —CVE-2021-38408 EPSS 12%
A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper v…
-
Medium 5.5
WordPress WP Google Maps Pro premium plugin <= 8.1.11 - Multiple Authenticated Persistent XSS vulnerabilities
Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plugin (versions <= 8.1.11). Vulnerable parameters: &wpgmaps_marker_category_name, Value > &attributes[], Name > &attributes[], &icons[], &nam…
-
Medium 5.5
WordPress WP Google Maps plugin <= 8.1.12 - Multiple Authenticated Persistent XSS vulnerabilities
Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (versions <= 8.1.12). Vulnerable parameters: &dataset_name, &wpgmza_gdpr_retention_purpose, &wpgmza_gdpr_company_name, &name #2, &name, &polyname #…
-
High 8.6
bandisoft ARK library heap overflow vulnerability
A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.
-
Unscored —CVE-2021-40223 Public exploit
Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configu…
-
Unscored —CVE-2021-40222 Public exploit
Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code exe…
-
Critical 9.8
Bypass deserialization checks in Apache Dubbo
The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the configuration set by the server. But there's an exception that the attacker can use to skip the security check (when enabled) and reaching a d…
-
Critical 9.8
Unprotected input value toString cause RCE
Some component in Dubbo will try to print the formated string of the input arguments, which will possibly cause RCE for a maliciously customized bean with special toString method. In the latest version, we fix the toString call in timeout, cache and some othe…
-
High 8.4
Possible heap overflow due to improper validation of local variable while storing current task information locally in S…
-
High 8.4
Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon…
-
High 8.4
Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Sn…
-
High 7.5
Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon …
-
High 7.5
Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
-
Medium 6.7
Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, …
-
Medium 6.7
Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for in…
-
Medium 6.7CVE-2021-1961 Public exploit
Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdra…
-
Medium 6.5
Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption i…
-
Medium 6.7
A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdrago…
-
Medium 6.5
Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with pa…
-
Medium 6.5
Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdrag…
-
High 7.8
Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, …
-
High 7.5
Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon…
-
Critical 9.8
Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Sna…
-
High 7.5
Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdrag…
-
High 7.1
Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Au…
-
High 8.4
Possible memory corruption due to improper check when application loader object is explicitly destructed while applicat…
-
Critical 9.8
UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Comp…