Archive
October 2021
Vulnerabilities first published in this month (UTC), newest first.
1,718 results · Feed
-
Unscored —
Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by a…
-
High 7.5
Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0
In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login attempts.
-
Low 3.1
Missing Secure Flag From SSL Cookie
The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions. The Secure attribute tells the browser to only send the cookie if the request is being sent over a secure channel such as HTTPS. This will help protect the cookie …
-
Medium 5.3
ASP.NET Debug Feature Enabled
The ASP.NET debug feature is enabled by default in Kiwi Syslog Server 9.7.2 and previous versions. ASP.NET allows remote debugging of web applications, if configured to do so. Debug mode causes ASP.NET to compile applications with extra information. The infor…
-
Medium 5.3
Advantech WebAccess/NMS Improper Authentication
WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed v…
-
Unscored —
PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing infor…
-
Medium 5.3
HTTP TRACK & TRACE Methods Enabled
The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was r…
-
Unscored —
Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to …
-
Unscored —
A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileg…
-
Unscored —
Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and …
-
Critical 9.9
Trane Tracer Code Injection
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.
-
High 7.2
godomall5 remote code execution vulnerability
The move_uploaded_file function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code.
-
High 8.0
Helpu arbitrary file creation vulnerability
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the …
-
Unscored —
There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a m…
-
Unscored —
There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit thi…
-
Unscored —
There is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to that the software uses e…
-
Unscored —
There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the s…
-
Unscored —
There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special cha…
-
Unscored —
There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high pr…
-
Medium 6.7
McAfee Total Protection (MTP) - Privilege Escalation vulnerability
Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection (MTP) prior to 16.0.34_x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the …
-
Unscored —
MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is no…
-
Medium 6.1
Cross site scripting in froala-editor
A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML.
-
Unscored —
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handle…
-
High 8.0
TIBCO Nimbus Stored Cross-site Scripting (XSS) vulnerabilities
The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts ta…
-
Medium 5.7
Authenticated Stored XSS in Administration
Shopware is open source e-commerce software. Versions prior to 5.7.6 contain a cross-site scripting vulnerability. This issue is patched in version 5.7.6. Two workarounds are available. Using the security plugin or adding a particular following config to the …
-
High 8.8
Download file outside intended directory
Mycodo is an environmental monitoring and regulation system. An exploit in versions prior to 8.12.7 allows anyone with access to endpoints to download files outside the intended directory. A patch has been applied and a release made. Users should upgrade to v…
-
High 7.3
Stored XSS in Client Groups Management (Authenticated)
Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. …
-
Medium 5.7
DoS via maliciously crafted p2p message
Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerability. Th…
-
Medium 6.4
Self-XSS in AS_Redis
AS_Redis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration lea…
-
Medium 5.8
FreeSWITCH vulnerable to SIP digest leak for configured gateways
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, an attacker can perform a SIP digest leak attack ag…
-
Medium 5.3
FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. By default, SIP requests of the type SUBSCRIBE are not authenticated in the …
-
Unscored —
OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has the modify per…
-
Unscored —
An Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able to rename the mysqld.…
-
Unscored —
Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upl…
-
Unscored —
Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/logi…
-
Unscored —
caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
-
Unscored —
A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php,…
-
High 7.5
WordPress Mangboard SQL-Injection vulnerability
A vulnerability was found in Mangboard(WordPress plugin). A SQL-Injection vulnerability was found in order_type parameter. The order_type parameter makes a SQL query using unfiltered data. This vulnerability allows a remote attacker to steal user information.
-
High 8.6CVE-2021-41078 Public exploit
Nameko Arbitrary code execution due to YAML deserialization
Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file.
-
High 8.1
TOBESOFT NEXACRO17 arbitrary command execution vulnerability
An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems.