Archive
20 September 2021
Vulnerabilities first published on this day (UTC), newest first.
171 results · Feed
-
High 8.0
CSRF Vulnerability in dada-mail 11.15.1 and below
Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page via email, SMS, etc, that - when visited, allows them control of the list control panel as if the bad actor was logged in …
-
High 7.5
Regular expression deinal of service in apprise
Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin (which just comes out of the box) …
-
High 7.5
Private message title and participating users leaked in discourse
Discourse is a platform for community discussion. In affected versions any private message that includes a group had its title and participating user exposed to users that do not have access to the private messages. However, access control for the private mes…
-
Medium 5.4
eID Easy <= 4.6 Reflected Cross-Site Scripting
The eID Easy WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error parameter found in the ~/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.6.
-
Medium 6.1
OptinMonster <= 2.6.0 Reflected Cross-Site Scripting
The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the load_previews function found in the ~/OMAPI/Output.php file which allows attackers to inject arbitrary web scripts, in versions up to…
-
Medium 5.8
Remote command injection when using sendmail email transport
### Impact Sites using the `sendmail` transport as part of their `mail` config are vulnerable to remote command injection due to a [vulnerability](https://github.com/advisories/GHSA-48ww-j4fc-435p) in the `nodemailer` dependency. Ghost defaults to the `direct…
-
High —
Prototype Pollution in mixme
### Impact When copying properties from a source object to a target object, the target object can gain access to certain properties of the source object and modify their content. ### Patches The problem was patch with a more agressive discovery of secured pro…
-
High 7.5
Command injection in mscdex/ssh2
ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a command injection vulnerability. The issue only exists on Windows. This issue may lead to remote code execution if a client of the library calls …
-
Unscored —
TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-pr…
-
Unscored —
Cross Site Scripting (XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php.
-
High 7.5
Regular Expression Denial of Service in flask-restx
Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS (Regular Expression Denial of Service) in email_regex. This is fixed in version 0.5.1.
-
High 7.5
Regular Expression Denial of Service in sqlparse
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many rep…
-
High 8.8CVE-2021-25741 Public exploit
Symlink Exchange Can Allow Host Filesystem Access
A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
-
Low 3.1
Holes in EndpointSlice Validation Enable Host Network Hijack
A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.
-
Medium 4.1
Webhook redirect in kube-apiserver
A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user ca…
-
Medium 4.4
IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM…
-
Medium 6.5
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI …
-
Medium 5.4
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…
-
Medium 5.4
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…
-
Medium 5.4
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…
-
Medium 5.4
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…
-
Medium 5.4
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vu…
-
Medium 4.9
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text wh…
-
Medium 6.4
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. …
-
Medium 6.4
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. …
-
Medium 6.4
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. …
-
Medium 5.4
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. …
-
Unscored —
An issue was discovered in sela through 20200412. file::SelaFile::readFromFile() in sela_file.c has a heap-based buffer…
-
Unscored —
An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow.
-
Unscored —
An issue was discovered in libiff through 20190123. A global-buffer-overflow exists in the function IFF_errorId located…
-
Unscored —
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_GetShapeBou…
-
Unscored —
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_ReadABC() l…
-
Unscored —
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traits_dump() l…
-
Unscored —
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_GetPlaceObject(…
-
Unscored —
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_FontExtract…
-
Unscored —
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_DumpActions() l…
-
Unscored —
Other An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function updateusa…
-
Unscored —
An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutpu…
-
Unscored —
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpABC() l…
-
Unscored —
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpActions…