Archive
12 November 2021
Vulnerabilities first published on this day (UTC), newest first.
73 results · Feed
-
High 7.5
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp…
-
High 7.5
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp…
-
High 7.5
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp…
-
Medium 6.8
Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privi…
-
Medium 6.5
Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. A…
-
High 7.5
Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing…
-
Medium 6.7
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local…
-
High 8.8
Antilles Dependency Confusion Vulnerability
A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote code execution during installation due to a package listed in requirements.txt not existing in the public package index (…
-
Medium 6.5
An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allo…
-
Medium 5.3
Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encryp…
-
Medium 6.5
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow …
-
Medium 6.5
A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allo…
-
Medium 4.2
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow …
-
Medium 6.8
An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker w…
-
Medium 6.4
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local a…
-
Medium 4.4
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad …
-
High 7.2
A command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3…
-
Medium 5.5
An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and…
-
Medium 6.7
A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from…
-
Medium 4.3
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enha…
-
Medium 6.7
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an…
-
High 8.8CVE-2021-3577 EPSS 60%
An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras th…
-
Medium 6.4
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when …
-
Unscored —
iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.
-
Unscored —
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header (request URI with…
-
Unscored —
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From head…
-
Unscored —
There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may a…
-
Unscored —
In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the l…
-
Unscored —
In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript fo…
-
Unscored —
The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an …
-
Medium 6.5
Credentials leak
Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.
-
Critical 9.8
UUPSUpgradeable vulnerability in OpenZeppelin Contracts
OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using `UUPSUpgradeable` may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of `@ope…
-
Unscored —CVE-2021-43579 Public exploit
A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim c…
-
High 8.8
Privilege escalation to cluster admin on multi-tenant environments
kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Users that can create Kubernetes Secrets, Service Accounts and…
-
Medium 4.3
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrect…
-
Low 2.4
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrect…
-
Medium 4.3
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrect…
-
Medium 4.0
IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missin…
-
Medium 5.4
IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
-
Unscored —
AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected by a directory traversal vulner…