Archive
5 October 2021
Vulnerabilities first published on this day (UTC), newest first.
57 results · Feed
-
Medium 4.3
Bounds check missing for decimal args in Vyper
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0.
-
Unscored —
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the…
-
Unscored —
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass …
-
Unscored —
User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflo…
-
Unscored —
A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s browser while the browser …
-
Unscored —
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=ad…
-
Unscored —
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.
-
Unscored —
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=l…
-
Unscored —
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing d…
-
High 7.4
Splash authentication credentials potentially leaked to target websites in scrapy-splash
Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected versions users who use [`HttpAuthMiddleware`](http://doc.scrapy.org/en/latest/topics/downloader-middleware.html#module-scrapy.downloadermiddlewares.httpauth) (i.e. the `h…
-
Critical 9.6CVE-2021-3625 Public exploit
Buffer overflow in Zephyr USB DFU DNLOAD
Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363
-
High 7.0
Buffer Access with Incorrect Length Value in zephyr
Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5
-
High 7.5
Zephyr JSON decoder incorrectly decodes array of array
Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA…
-
Medium 4.3
BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known
BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions >= 1.14.2, >= 2.4.0, >= 2.5.0 contain Use of Multiple Resources with Duplicate Identifier (CWE-694). For more information…
-
Medium 6.5
DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses
DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zeph…
-
High 7.5
Unauthorized access to Credit card form in sylius/paypal-plugin
sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment page done after checkout was created with autoincremented payment id (/pay-with-paypal/{id}) and therefore it was easy to predict. The pro…
-
High 8.2
Command injection in composer on Windows
Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not aff…
-
Critical 9.8
Snapshot authentication bypass in grafana
Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If…
KEV Aug 25, 2022 -
High 7.5
TIBCO FTL unvalidated SAN in client certificates
The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, TIBCO ActiveSpaces - Enterprise Edition, TIBCO FTL - Community Edition,…
-
High 8.8
Cross-Site-Request-Forgery in Backend URI Handling in Typo3
TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature that allows users to create and share deep links in the backend user interface is vulnerable to cross-site-reques…
-
Medium 4.8
HTTP Host Header Injection in Request Handling in Typo3
TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that TYPO3 CMS is susceptible to host spoofing due to improper validation of the HTTP Host header. TYPO3 uses the HTTP Host header, for example,…
-
Unscored —
Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the appl…
-
Unscored —CVE-2021-35492 Public exploit
Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources v…
-
Unscored —
A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker t…
-
Unscored —
In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in /archibus/login.axvw assign a session …
-
Unscored —
ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functi…
-
Unscored —
In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkfl…
-
Medium 6.5
apollo_upload_server has Denial of Service vulnerability
A Denial Of Service vulnerability in the apollo_upload_server Ruby gem in GitLab CE/EE all versions starting from 11.9 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to deny a…
-
High 7.3
A stored Cross-Site Scripting vulnerability in the Jira integration in all GitLab versions starting from 13.9 before 14…
-
Medium 4.3
The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses
-
Medium 5.4
Missing access control in all GitLab versions starting from 13.12 before 14.0.9, all versions starting from 14.1 before…
-
Medium 5.3
An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9, all versions starting f…
-
Medium 6.8
An issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9, all versions starting f…
-
Medium 4.3
In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint …
-
Medium 4.3
In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import ena…
-
Low 3.5
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client appl…
-
Low 2.6
Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starti…
-
Medium 5.9
In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are…
-
Medium 5.4
A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project ac…
-
Medium 6.5
In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired …