Archive
September 2021
Vulnerabilities first published in this month (UTC), newest first.
1,922 results · Feed
-
Unscored —
All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-u…
-
Unscored —
The network address administrative settings web portal for the Zoom on-premise Meeting Connector before version 4.6.360…
-
Unscored —
The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does no…
-
Unscored —
The network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller before version 4.6.348.20…
-
Unscored —
During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possib…
-
Unscored —
During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to la…
-
Unscored —
A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outloo…
-
High 7.8
Zoom Client Installer Local Privilege Escalation
It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2.0, Zoom Client Plugin for Sharing iPhone/iPad before version 5.2.0, and Zoom Rooms for Conference before ver…
-
Unscored —
The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable direc…
-
Unscored —
The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate inform…
-
Unscored —
Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper …
-
Medium 6.5
ControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase.
The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can…
-
Unscored —
An issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of-bounds write, resulting…
-
Unscored —
An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSig…
-
High 7.5
Inefficient Regular Expression Complexity in nltk/nltk
nltk is vulnerable to Inefficient Regular Expression Complexity
-
Medium 5.3
Inefficient Regular Expression Complexity in josdejong/jsoneditor
jsoneditor is vulnerable to Inefficient Regular Expression Complexity
-
Medium 5.3
Inefficient Regular Expression Complexity in pksunkara/inflect
inflect is vulnerable to Inefficient Regular Expression Complexity
-
Medium 4.3
Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
-
Medium 6.3
Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking
-
Medium 5.4
Improper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-admin
grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames
-
Unscored —
In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can b…
-
Unscored —
A SSRF issue was discovered in Concrete CMS through 8.5.5. Users can access forbidden files on their local network. A u…
-
Unscored —
An issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF. ccm_token is not verified on…
-
Unscored —
An issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in blog comments via the web…
-
Unscored —
An issue was discovered in Concrete CMS through 8.5.5. There is XSS via Markdown Comments.
-
Unscored —
An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass.
-
Unscored —
In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosu…
-
Unscored —
In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege…
-
Unscored —
In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege…
-
Unscored —
In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local…
-
Unscored —
In memory management driver, there is a possible side channel information disclosure. This could lead to local informat…
-
Unscored —
In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local d…
-
Unscored —
In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to l…
-
Unscored —
In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local d…
-
Unscored —
In memory management driver, there is a possible information disclosure due to a missing bounds check. This could lead …
-
Unscored —
An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF.
-
Unscored —
An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regu…
-
Unscored —
An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution v…
-
Unscored —
On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11…
-
Unscored —
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add…