Archive
7 October 2021
Vulnerabilities first published on this day (UTC), newest first.
70 results · Feed
-
Unscored —
A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 31…
-
Unscored —
A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.
-
Medium 4.3
Regular expression denial-of-service in Zulip
Zulip is an open source team chat server. In affected versions Zulip allows organization administrators on a server to configure "linkifiers" that automatically create links from messages that users send, detected via arbitrary regular expressions. Malicious …
-
Unscored —
Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE.
-
Unscored —
JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which…
-
Unscored —
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid pa…
-
Unscored —
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid pa…
-
Unscored —
Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar.
-
Unscored —
ThinkPHP50-CMS v1.0 contains a remote code execution (RCE) vulnerability in the component /public/?s=captcha.
-
Unscored —
An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted r…
-
Unscored —
An issue was discovered in Zammad before 4.1.1. There is stored XSS via a custom Avatar.
-
Unscored —
An issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and gain admin access, via a …
-
Unscored —
An issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the API.
-
Unscored —
An issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because clipboard data is mishandled.
-
Unscored —
An issue was discovered in Zammad before 4.1.1. The REST API discloses sensitive information.
-
Unscored —
An issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution because deserializa…
-
Unscored —
An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration.
-
Unscored —
An issue was discovered in Zammad before 4.1.1. Stored XSS may occur via an Article during addition of an attachment to…
-
Unscored —
An issue was discovered in Zammad before 4.1.1. An admin can execute code on the server via a crafted request that mani…
-
Unscored —
An issue was discovered in Zammad before 4.1.1. Command Injection can occur via custom Packages.
-
Medium 6.4
X-Endpoint-API-UserInfo can be spoofed in cloudendpoints Extensible Service Proxy
Extensible Service Proxy, a.k.a. ESP is a proxy which enables API management capabilities for JSON/REST or gRPC API services. ESPv1 can be configured to authenticate a JWT token. Its verified JWT claim is passed to the application by HTTP header "X-Endpoint-A…
-
Medium 4.3
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain se…
-
Medium 6.5
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by im…
-
Medium 4.9
IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability al…
-
Medium 5.4
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows user…
-
Medium 4.3
IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a …
-
Medium 4.3
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an atta…
-
Medium 5.4
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows user…
-
Medium 6.3
IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could a…
-
Medium 4.3
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to t…
-
Medium 6.5
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message …
-
Medium 4.3
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another …
-
Medium 5.4
Cross-site Scripting (XSS)
This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array (instead of a string).
-
Unscored —
In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metachara…
-
Critical 9.8
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories a…
KEV Nov 3, 2021 -
Unscored —
Billion Laughs
Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions o…
-
Unscored —
DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid
While working on Apache OpenOffice 4.1.8 a developer discovered that the DEB package did not install using root, but instead used a userid and groupid of 500. This both caused issues with desktop integration and could allow a crafted attack on files owned by …
-
Unscored —
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execu…
-
Unscored —CVE-2021-37919 EPSS 11%
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code exec…
-
Unscored —CVE-2021-37920 EPSS 11%
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code exec…