Archive
19 October 2021
Vulnerabilities first published on this day (UTC), newest first.
120 results · Feed
-
Critical 9.8
Session Smart Router: Authentication Bypass Vulnerability
The usage of an internal HTTP header created an authentication bypass vulnerability (CWE-287), allowing an attacker to view internal files, change settings, manipulate services and execute arbitrary code. This issue affects all Juniper Networks 128 Technology…
-
High 7.5
Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet
An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Junos OS results in a kernel crash, causing the device to restart, leading to a Denial of Service (DoS).…
-
Medium 4.7
Junos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions
A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the FPC, if the command is executed coincident with other system events outside the…
-
Medium 6.5
Junos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication
A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to un…
-
High 7.4
CTPView: HSTS not being enforced on CTPView server.
The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response header which allows servers to indicate that content from the requested domain will only be served over HTTPS. The lack of HSTS may leave …
-
Medium 5.3
Reactions leak for secure category topics and private messages
Discourse-reactions is a plugin for the Discourse platform that allows user to add their reactions to the post. In affected versions reactions given by user to secure topics and private messages are visible. This issue is patched in version 0.2 of discourse-r…
-
High 8.2
Improper sanitization of target names in tough
Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The tough library, prior to 0.12.0, does not properly sanitize target names when caching a repository, or when saving specific targets to an out…
-
High 7.5
Client metadata path-traversal in python-tuf
python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ngclient`), there is a path traversal vulnerability that in the worst case can overwrite files ending in `.json` anywhere on the client syste…
-
High 8.1
Reflected XSS in Combodo/iTop
Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability on "run query" page when logged as administrator. This has been resolved in versions 2.6.5 and 2.7.5.
-
High 8.7
Unauthorized setup leads to SSRF in Combodo/iTop
iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup without authentication. Given specific parameters this can lead to SSRF. This issue has been resolved in versions 2.6.5 and 2.7.5 and later
-
Unscored —
Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.
-
Medium —
Cross Site Scripting in Microweber
Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form.
-
Unscored —
An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service a…
-
Medium 4.4
IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authent…
-
Medium 5.4
IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to emb…
-
Medium 5.5
Indeed Job Importer <= 1.0.5 Authenticated Stored Cross-Site Scripting
The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/indeed-job-importer/trunk/indeed-job-importer.php file which allowed attackers wi…
-
Medium 5.5
MPL-Publisher – Self-publish your book & ebook <= 1.30.2 Authenticated Stored Cross-Site Scripting
The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php file which allowed attackers with administrative user acce…
-
Medium 5.5
JobBoardWP – Job Board Listings and Submissions <= 1.0.7 Authenticated Stored Cross-Site Scripting
The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/includes/admin/class-metabox.php file which allowed attackers with administrative user acc…
-
Medium 4.8
WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions <= 2.0.2) vulnerable at "Headline" (&message_data[16][headline]) input.
-
Unscored —
Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability…
-
Unscored —
A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remote…
-
Unscored —
FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made bef…
-
Unscored —
A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability i…
-
Unscored —CVE-2021-30358 EPSS 27%
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run …
-
Medium 6.1
Cross site scripting in actionpack Rubygem
A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
-
Unscored —
A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-005 Catalina. Mo…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker…
-
Unscored —
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state managem…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8. A remote a…
-
Unscored —
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watch…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be abl…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Proces…
-
High 7.8
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS…
KEV Nov 3, 2021 -
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. In certain sit…
-
Unscored —
A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in Secur…
-
Unscored —
A URI parsing issue was addressed with improved parsing. This issue is fixed in Security Update 2021-005 Catalina, macO…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur …
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-005 …
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005…
-
Unscored —
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15, wa…