Archive
22 September 2021
Vulnerabilities first published on this day (UTC), newest first.
37 results · Feed
-
Medium —
Regular Expression Denial of Service in millisecond
Versions of `millisecond` prior to 0.1.2 are affected by a regular expression denial of service vulnerability when extremely long version strings are parsed. ## Proof of concept ``` var ms = require('millisecond'); var genstr = function (len, chr) { var resul…
-
Unscored —
CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to e…
-
High 7.5
Regular Expression Denial of Service in Leo Editor
Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS) vulnerability in the component plugins/importers/dart.py.
-
Unscored —
gmate v0.12+bionic contains a regular expression denial of service (ReDoS) vulnerability in the gedit3 plugin.
-
Unscored —
The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor wit…
-
Unscored —
The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A mali…
-
Medium —
Denial of Service in node-static
All versions of node-static are vulnerable to a Denial of Service. The package fails to catch an exception when user input includes null bytes. This allows attackers to access `http://host/%00` and crash the server.
-
Medium 6.5
Ninja Forms <= 3.5.7 Sensitive Information Disclosure
The Ninja Forms WordPress plugin is vulnerable to sensitive information disclosure via the bulk_export_submissions function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to expo…
-
Medium 6.4
Ninja Forms <= 3.5.7 Unprotected REST-API to Email Injection
The Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to send arbitrary e…
-
Unscored —
This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media con…
-
Unscored —
This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media con…
-
Unscored —
This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media con…
-
Unscored —
This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media con…
-
Unscored —
This module enables sites to define a domain from Domain Access that points directly to a group page. The module doesn'…
-
Unscored —
This module provides a solution to authenticate visitors using existing SAML providers. Certain non-default configurati…
-
Unscored —
This module provides a powerful interface for managing a taxonomy vocabulary. A vocabulary gets displayed in a dynamic …
-
Unscored —
This module enables you to extract the textual content of files for use on a website, e.g. to display it or use it in s…
-
Unscored —
This module provides a system for building an ecommerce solution in their Drupal site. The module doesn't sufficiently …
-
Unscored —
The module provides a field widget for selecting taxonomy terms in a hierarchical fashion. The module doesn't sanitize …
-
Unscored —
This module enables you to create an individual hash for each user. These hashes can be used for authentication instead…
-
Low 3.7
Cross-site Scripting in Mattermost
Mattermost 5.38 and earlier fails to sufficiently sanitize clipboard contents, which allows a user-assisted attacker to inject arbitrary web script in product deployments that explicitly disable the default CSP.
-
Unscored —
Edgecore ECS2020 Firmware 1.0.0.0 devices allow Unauthenticated Command Injection via the command1 HTTP header to the /…
-
Unscored —
Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated J…
-
Unscored —
LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities u…
-
Unscored —
Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat a…
-
Unscored —
Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO.
-
Medium 5.6
Improper Privilege Management in MA for Windows
Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information. The utility was able to be run from any location on the file system and by a low privileged user.
-
High 8.2
Improper privilege management in repair process of MA for Windows
Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL preloading attack using unsigned DLLs. This would result in elevation of privileges and the ability to execut…
-
High 8.2
DLL side loading vulnerability in MA for Windows
A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location. This would result in the user gaining elevated permis…
-
Unscored —CVE-2021-37925 EPSS 10%
Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability.
-
Unscored —
MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database.
-
Critical 9.8
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation…
KEV Jan 10, 2022 -
Medium 5.8
Telefication <= 1.8.0 Open Proxy and Server-Side Request Forgery
The Telefication WordPress plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the ~/bypass.php file due to a user-supplied URL request value that gets called by a curl requests. This affects versions up to, and including, 1.8.0.
-
Medium 5.9
Timing Attack Vulnerability for Apache Kafka Connect and Clients
Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or high…
-
Unscored —
In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handle…
-
Critical 9.8
Remote Code Execution in Halibut
In Halibut versions prior to 4.4.7 there is a deserialisation vulnerability that could allow remote code execution on systems that already trust each other based on certificate verification.
-
High 7.1
Improper Input Validation and Command Injection in Ansible
A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely …