Archive
2 November 2021
Vulnerabilities first published on this day (UTC), newest first.
97 results · Feed
-
Unscored —
Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit h…
-
Unscored —
Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially ex…
-
Medium 4.3
A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a r…
-
Low 3.2
An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5…
-
High 8.8
A improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in Fortinet FortiWLM version 8.6…
-
High 8.8
A improper neutralization of special elements used in an OS command ('OS Command Injection') in Fortinet FortiWLM versi…
-
High 7.4
An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and bel…
-
High 8.8
A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows atta…
-
Medium 5.3
A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allow…
-
Medium 5.5
A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticate…
-
High 7.8
A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute …
-
Medium 4.3
A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before …
-
Medium 6.1
Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a…
-
High 8.6
Missing Authorization with Default Settings in Dashboard UI
Hangfire is an open source system to perform background job processing in a .NET or .NET Core applications. No Windows Service or separate process required. Dashboard UI in Hangfire.Core uses authorization filters to protect it from showing sensitive data to …
-
Medium 6.5
Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a…
-
Medium 4.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer versio…
-
High 8.1
Improper Neutralization of Special Elements used in an LDAP Query
Thunderdome is an open source agile planning poker tool in the theme of Battling for points. In affected versions there is an LDAP injection vulnerability which affects instances with LDAP authentication enabled. The provided username is not properly escaped.…
-
Medium 6.3
An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated …
-
Medium 4.1
An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and bel…
-
Unscored —
Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows at…
-
Unscored —
Cross site scripting (XSS) vulnerability in application/controllers/AdminController.php in xujinliang zibbs 1.0, allows…
-
Unscored —
Cross site scripting (XSS) vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the ro…
-
Unscored —
Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password o…
-
Unscored —
SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privil…
-
Unscored —
Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long u…
-
Unscored —
An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of se…
-
Unscored —
Buffer overflow vulnerability in function src_parser_trans_stage_1_2_3 trgil gilcc before commit 803969389ca9c06237075a…
-
Unscored —
Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when tryi…
-
Unscored —
Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denial of service via an un…
-
Unscored —
Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code.
-
Unscored —
An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows at…
-
Unscored —
Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the tit…
-
Low 3.5
An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below ma…
-
Medium 4.3
An improper restriction of XML external entity reference vulnerability in the parser of XML responses of FortiPortal be…
-
Low 3.1
A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the cust…
-
High 7.1
IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing X…
-
Medium 6.5
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exe…
-
Medium 5.9
IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information due to a insecure third …
-
Medium 5.4
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …
-
Medium 5.4
IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forger…