Skip to content
OpenAdvisories

Archive

13 September 2021

Vulnerabilities first published on this day (UTC), newest first.

14 results · Clear filters · Feed

  • High 7.6

    Prototype Pollution in fiznool/body-parser-xml

    body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

  • High 7.2
    CVE-2021-33554 Public exploit EPSS 59%

    UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

  • High 7.2
    CVE-2021-33553 Public exploit EPSS 51%

    UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

  • High 7.2
    CVE-2021-33552 Public exploit EPSS 51%

    UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

  • High 7.2
    CVE-2021-33551 Public exploit EPSS 51%

    UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

  • High 7.2
    CVE-2021-33550 Public exploit EPSS 59%

    UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

  • High 7.2
    CVE-2021-33549 Public exploit EPSS 67%

    UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.

  • High 7.2
    CVE-2021-33548 Public exploit EPSS 59%

    UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

  • High 7.2

    UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code.

  • High 7.2

    UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code.

  • High 7.2

    UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.

  • High 7.2
    CVE-2021-33544 Public exploit EPSS 96%

    UDP Technology/Geutebrück camera devices: command injection leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

  • High 8.0

    Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

  • High 7.8

    Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthent…