Archive
14 October 2021
Vulnerabilities first published on this day (UTC), newest first.
34 results · Feed
-
High 7.5CVE-2021-42340 EPSS 12%
DoS via memory leak with WebSocket connections
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket c…
-
Unscored —CVE-2021-38295 Public exploit
Privilege escalation vulnerability when using HTML attachments
In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via the CouchDB admin interface Fauxton, any JavaScript code e…
-
Unscored —
In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Re…
-
Unscored —
In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Ob…
-
Medium 5.4
In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploit…
-
Unscored —
In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and …
-
Unscored —
In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cros…
-
High 8.8
Cross Site Request Forgery in kindeditor
A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.
-
Medium 6.1
Cross site scripting in kindeditor
Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).
-
Medium 5.4
XSS via the name of a deleted attachment
Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. There is a cross-site scripting vulnerability in Tuleap Community Edition prior to 12.11.99.25 and Tuleap Enterprise Edition 12.11-2. A malicio…
-
High 8.8
Brizy <= 2.3.11 Authenticated Unrestricted File Upload and Path Traversal
The Brizy Page Builder plugin <= 2.3.11 for WordPress allowed authenticated users to upload executable files to a location of their choice using the brizy_create_block_screenshot AJAX action. The file would be named using the id parameter, which could be prep…
-
High 7.1
Brizy <= 1.0.125 and 1.0.127 – 2.3.11 Incorrect authorization checks allowing Post modification
The Brizy Page Builder plugin <= 2.3.11 for WordPress used an incorrect authorization check that allowed any logged-in user accessing any endpoint in the wp-admin directory to modify the content of any existing post or page created with the Brizy editor. An i…
-
Medium 6.4
Brizy <= 2.3.11 Authenticated Stored Cross-Site Scripting
The Brizy Page Builder plugin <= 2.3.11 for WordPress was vulnerable to stored XSS by lower-privileged users such as a subscribers. It was possible to add malicious JavaScript to a page by modifying the request sent to update the page via the brizy_update_ite…
-
Critical 9.8
Inconsistent input sanitisation leads to XSS vectors
OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper sanitization through HTML escaping. Due to the lack of sanitization and use of ``jQuery.html()``, there are a whole host…
-
Unscored —
An LDAP injection vulnerability in /account/login in Huntflow Enterprise before 3.10.6 could allow an unauthenticated, …
-
Unscored —CVE-2021-33179 EPSS 12%
The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scr…
-
Unscored —
The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path trav…
-
Unscored —CVE-2021-33177 EPSS 10%
The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation …
-
Medium 6.1
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-st…
-
High 8.8
DOS and Open Redirect with user input
A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash `//` followed by a domain: `http://localhost:3000//a//youtube.com/%2e%2e%2f…
-
Unscored —
An XML External Entity (XXE) vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to rea…
-
Unscored —
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive d…
-
Unscored —
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive d…
-
Unscored —
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive d…
-
Unscored —
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive d…
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.…
-
Unscored —
A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a ne…
-
Unscored —
A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 a…
-
Medium 5.9
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb
LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the LedgerSMB server is behind a reverse proxy. By tricking a user to use an unencrypted connection (HTTP), an attacker may be able to obtain the …
-
Unscored —
An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be pass…
-
Unscored —
checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for th…
-
Unscored —
AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Ch…
-
Critical 9.9
Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject…
-
Critical 9.1
Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC …