10 November 2021

131 results · Feed

• Unscored —
  CVE-2021-40873

  An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40…

  Nov 10, 2021
• Unscored —
  CVE-2021-40872

  An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a de…

  Nov 10, 2021
• Unscored —
  CVE-2021-40871

  An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial…

  Nov 10, 2021
• Medium 6.1
  CVE-2021-33618 EPSS 79%

  Dolibarr ERP and CRM contain XSS Vulnerability

  Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove attribute of a BODY element to the user-management feature.

  dolibarr dolibarr/dolibarr Ubuntu Packagist
  Nov 10, 2021
• Critical 9.8
  CVE-2021-33816

  Dolibarr remote PHP code execution

  The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shell_exec are blocked but backticks are not blocked.

  dolibarr dolibarr/dolibarr Ubuntu Packagist
  Nov 10, 2021
• Unscored —
  CVE-2020-23906

  FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insuffic…

  ffmpeg qtwebengine-opensource-src Debian Ubuntu
  Nov 10, 2021
• Unscored —
  CVE-2020-23904

  A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted W…

  speex Ubuntu
  Nov 10, 2021
• Unscored —
  CVE-2020-23903

  A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial…

  speex speex Debian Ubuntu
  Nov 10, 2021
• Unscored —
  CVE-2020-23902

  A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Re…

  Nov 10, 2021
• Unscored —
  CVE-2020-23901

  A User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a …

  Nov 10, 2021
• Unscored —
  CVE-2020-23900

  A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Re…

  Nov 10, 2021
• Unscored —
  CVE-2020-23899

  A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a …

  Nov 10, 2021
• Unscored —
  CVE-2020-23898

  A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a …

  Nov 10, 2021
• Unscored —
  CVE-2020-23897

  A User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer v6.6 allows attackers to cause…

  Nov 10, 2021
• Unscored —
  CVE-2020-23896

  A User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a …

  Nov 10, 2021
• Unscored —
  CVE-2020-23895

  A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a …

  Nov 10, 2021
• Unscored —
  CVE-2020-23894

  A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of…

  Nov 10, 2021
• Unscored —
  CVE-2020-23893

  A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause…

  Nov 10, 2021
• Unscored —
  CVE-2020-23890

  A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted JPG file. Re…

  Nov 10, 2021
• Unscored —
  CVE-2020-23891

  A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a …

  Nov 10, 2021
• Unscored —
  CVE-2020-23889

  A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers…

  Nov 10, 2021
• Unscored —
  CVE-2020-23888

  A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause…

  Nov 10, 2021
• Unscored —
  CVE-2020-23887

  XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) v…

  Nov 10, 2021
• Unscored —
  CVE-2020-23886

  XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) v…

  Nov 10, 2021
• Unscored —
  CVE-2020-23884

  A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service (DoS) via a crafted MNG file.

  qtimageformats-opensource-src nomacs Debian Ubuntu
  Nov 10, 2021
• Unscored —
  CVE-2020-23879

  pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.

  Nov 10, 2021
• Unscored —
  CVE-2020-23878

  pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.

  Nov 10, 2021
• Unscored —
  CVE-2020-23877

  pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.

  Nov 10, 2021
• Unscored —
  CVE-2020-23876

  pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.

  Nov 10, 2021
• Unscored —
  CVE-2020-23874

  pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.

  Nov 10, 2021
• Unscored —
  CVE-2020-23872

  A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of…

  Nov 10, 2021
• Unscored —
  CVE-2020-23873

  pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.

  Nov 10, 2021
• Medium 5.5
  CVE-2021-42111

  An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device,…

  Nov 10, 2021
• Medium 5.7
  CVE-2021-3572 Public exploit

  Improper Input Validation in pip

  A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This i…

  python-pip pip python-pip Debian Ubuntu PyPI
  Nov 10, 2021
• Unscored —
  CVE-2021-22048 EPSS 10%

  The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authent…

  Virtualization
  Nov 10, 2021
• Unscored —
  CVE-2021-32023

  An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 157…

  Windows
  Nov 10, 2021
• Unscored —
  CVE-2021-32022

  A low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows version(s) versions 1574 a…

  Windows
  Nov 10, 2021
• Unscored —
  CVE-2021-32021

  A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and …

  Windows
  Nov 10, 2021
• Critical 9.8
  CVE-2021-3064 Public exploit EPSS 20%

  PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces

  A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The atta…

  Palo Alto Networks PAN-OS Prisma Access Network devices
  Nov 10, 2021
• High 7.5
  CVE-2021-3063

  PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces

  An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to send specifically crafted traffic to a GlobalProtect interface that…

  Palo Alto Networks PAN-OS Prisma Access Network devices
  Nov 10, 2021