Archive
22 October 2021
Vulnerabilities first published on this day (UTC), newest first.
101 results · Feed
-
Unscored —
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_m…
-
Unscored —
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychann…
-
Unscored —
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_ma…
-
Unscored —
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sys_adm…
-
Unscored —
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtm…
-
Unscored —
Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting (XSS) vulnerability in the acc…
-
Unscored —
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting (XSS) vulnerability in…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Support module of SugarCRM v6.5.18 allows attackers to execu…
-
Unscored —
Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicena…
-
Medium 5.4
IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability a…
-
Medium 5.9
Bypass bruteforce protection on login form in elabftw
eLabFTW is an open source electronic lab notebook manager for research teams. In versions of eLabFTW before 4.1.0, it allows attackers to bypass a brute-force protection mechanism by using many different forged PHPSESSID values in HTTP Cookie header. This iss…
-
Unscored —CVE-2021-42556 Public exploit
Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to l…
-
Unscored —
SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumst…
-
Unscored —
GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.
-
High —
Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui
### Impact `rucio-webui` installations of the `1.26` release line potentially leak the contents of cookies to other sessions within a wsgi container. Impact is that Rucio authentication tokens are leaked to other users accessing the `webui` within a close tim…
-
Unscored —
The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps dur…
-
Unscored —
In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStor…
-
Unscored —
In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missi…
-
Unscored —
In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead t…
-
Unscored —CVE-2021-0705 Public exploit
In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and ke…
-
Unscored —CVE-2021-0652 Public exploit
In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due …
-
Unscored —
In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead t…
-
Unscored —
In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without…
-
Unscored —
In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused depu…
-
Unscored —
In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to lo…
-
Unscored —
In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to i…
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input.
-
Medium 6.3
Trane Building Automation Controllers Cross-site Scripting
The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms.
-
Unscored —
The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code (by: oretnom23 ) is vulnerable …
-
Unscored —
sodiumoxide is deprecated
Alternatives may be found - not in any specific order: - [libsodium-sys-stable](https://crates.io/crates/libsodium-sys-stable) - [dryoc](https://crates.io/crates/dryoc) - [RustCrypto/nacl-compat](https://github.com/RustCrypto/nacl-compat) (`crypto_box`, `cryp…
-
Critical 9.8
Showdoc File Upload Vulnerability
ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions.
-
Unscored —
Cross-Site Scripting (XSS) vulnerability exists in Csdn APP 4.10.0, which can be exploited by attackers to obtain sensi…
-
Unscored —
All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM (Product Life Cycle Management) is a s…
-
Unscored —
The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for r…
-
Critical 9.8
AUVESY Versiondog
Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product.