Archive
16 September 2021
Vulnerabilities first published on this day (UTC), newest first.
48 results · Feed
-
Unscored —CVE-2021-41314 EPSS 14%
Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several fa…
-
Unscored —
fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.
-
Unscored —
fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.
-
Unscored —
fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
-
Unscored —
fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.
-
Unscored —
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/…
-
Unscored —
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/…
-
Low 3.7
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to …
-
Medium 5.9
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN…
-
Medium 5.1
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could a…
-
Medium 4.4
IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileg…
-
High 8.1CVE-2021-39214 Public exploit
Lacking Protection against HTTP Request Smuggling in mitmproxy
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/…
-
High 7.5
Apache Tomcat DoS with unexpected TLS packet
Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite lo…
-
Critical 9.0
mod_proxy SSRF
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
KEV Dec 1, 2021 -
Unscored —CVE-2021-39275 EPSS 39%
ap_escape_quotes buffer overflow
ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.
-
High —
XML External Entity (XXE) vulnerability
A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.
-
Unscored —CVE-2021-36160 EPSS 64%
mod_proxy_uwsgi out of bound read
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).
-
Unscored —CVE-2021-34798 EPSS 65%
NULL pointer dereference in httpd core
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
-
Medium 4.3
WriteEntryToDirectory used for an archive extraction is vulnerable to partial path traversal.
SharpCompress is a fully managed C# library to deal with many compression types and formats. Versions prior to 0.29.0 are vulnerable to partial path traversal. SharpCompress recreates a hierarchy of directories under destinationDirectory if ExtractFullPath is…
-
Unscored —
OpenSIS Community Edition version <= 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" p…
-
Unscored —
OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via …
-
Medium 4.3
Observable discrepancy in Kaden PICOFLUX AiR leaks water consumption
In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumption without distinct values) to third parties.
-
Medium 6.2
Incorrect calculation in Enbra EWM does not report backflows or no flow events
In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events.
-
Medium 6.5
Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)
Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.
-
Medium 6.5
Hard-coded Credentials in Enbra Wireless M-Bus devices
Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM.
-
Unscored —
There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router…
-
Unscored —
There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under admini…
-
Unscored —
There is command injection in the meshd program in the routing system, resulting in command execution under administrat…
-
Unscored —
Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi…
-
Unscored —
The access controls on the Mobility read-write API improperly validate user access permissions; this API is disabled by…
-
Unscored —
The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both netw…
-
High 7.2
Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attacker…
-
Unscored —
fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
-
Unscored —
libde265 v1.0.4 contains a segmentation fault in the apply_sao_internal function, which can be exploited via a crafted …
-
Unscored —
libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited via a crafted a file.
-
Unscored —
libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited vi…
-
Unscored —
libde265 v1.0.4 contains a stack buffer overflow in the put_qpel_fallback function, which can be exploited via a crafte…
-
Unscored —
fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.
-
Unscored —
libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_pred_avg_16_fallback function, which can be exploit…
-
Unscored —
libde265 v1.0.4 contains a global buffer overflow in the decode_CABAC_bit function, which can be exploited via a crafte…