Archive
11 October 2021
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Medium 6.5
Prototype Pollution
All versions of package config-handler are vulnerable to Prototype Pollution when loading config files.
-
Medium 6.7
Code exec via yaml parsing
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
-
Unscored —
An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14…
-
Unscored —
PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability. The File Manager function in admin panel does…
-
Unscored —CVE-2021-40617 Public exploit
An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php.
-
Unscored —
PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "web…
-
Unscored —
A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c
-
Unscored —
A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the run_interpreter function.
-
High 8.7CVE-2021-41117 Public exploit
Insecure random number generation
keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating id…
-
Unscored —
The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection v…
-
Unscored —
The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file re…
-
Medium 5.5
An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting f…
-
Unscored —
A potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 …
-
Unscored —
Content Manipulation with Double Certificate Attack
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability i…
-
Unscored —
NetApp Cloud Manager versions prior to 3.9.10 are susceptible to a vulnerability which could allow a remote unauthentic…
-
Unscored —
There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when…
-
Unscored —
In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjac…
-
High 8.8
AccessPress Themes - Authenticated Malicious File Upload
A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in …
-
High 7.5
exacqVision Server 32-bit
An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition.
-
Critical 9.8
exacqVision Web Service
Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server.
-
Unscored —
Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all u…
-
Unscored —
PHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag without "//" in descr…
-
Unscored —
Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauthenticated user can inject and execute J…
-
Unscored —
Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at…
-
Unscored —
Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute c…
-
Unscored —
rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any…
-
Unscored —
rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file…
-
Unscored —
Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids…
-
Unscored —
Comments - wpDiscuz <= 7.3.0 - Admin+ Stored Cross-Site Scripting
The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when th…
-
Unscored —
GeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS)
The GeoDirectory Business Directory WordPress plugin before 2.1.1.3 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS).
-
Unscored —CVE-2021-24719 Public exploit
Enfold Theme < 4.8.4 - Reflected Cross-Site Scripting (XSS)
The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfold versions previous than 4.8.4 which use Avia Page Builder.
-
Unscored —
Appointment Hour Booking – WordPress Booking Plugin < 1.3.17 - Authenticated Stored XSS
The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.
-
Unscored —
Software License Manager < 4.5.1 - Arbitrary Domain Deletion via CSRF
The del_reistered_domains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack
-
Unscored —
Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting
The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues
-
Unscored —
Quiz And Survey Master < 7.3.2 - Admin+ Stored Cross-Site Scripting
The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is d…
-
Unscored —
Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting
The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings.
-
Unscored —
Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting
The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting issue.
-
Unscored —
Duplicate Page <= 4.4.2 - Admin+ Stored Cross-Site Scripting
The Duplicate Page WordPress plugin through 4.4.2 does not sanitise or escape the Duplicate Post Suffix settings before outputting it, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capabili…
-
Unscored —
Simple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site Scripting
The Simple Social Media Share Buttons WordPress plugin before 3.2.4 does not escape the Share Title settings before outputting it in the frontend pages or posts (depending on the settings used), allowing high privilege users to perform Cross-Site Scripting at…
-
Unscored —
Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection
The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_poll AJAX action. While the result is not disclosed in the response, it is possible to use a timing attack to exfiltrate data such as passwor…