Archive
12 November 2021
Vulnerabilities first published on this day (UTC), newest first.
21 results · Clear filters · Feed
-
High 7.5
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp…
-
High 7.5
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp…
-
High 7.5
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp…
-
High 7.5
Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing…
-
High 8.8
Antilles Dependency Confusion Vulnerability
A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote code execution during installation due to a package listed in requirements.txt not existing in the public package index (…
-
High 7.2
A command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3…
-
High 8.8
An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras th…
-
High 8.8
Privilege escalation to cluster admin on multi-tenant environments
kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Users that can create Kubernetes Secrets, Service Accounts and…
-
High 7.8
OS Command Injection in ohmyzsh/ohmyzsh
ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command
-
High 8.1
Agent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files
Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier implements an agent-to-controller message that does not implement any validation of its input, allowing attackers able to control agent processes to replace arbitrary files on the Jenkins c…
-
High 7.1
XXE vulnerability in Jenkins OWASP Dependency-Check Plugin
Jenkins OWASP Dependency-Check Plugin 5.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
-
High 7.5
Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snap…
-
High 7.8
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Comput…
-
High 7.8
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Com…
-
High 7.8
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Au…
-
High 7.5
Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Sn…
-
High 7.5
Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Sna…
-
High 7.8
Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snap…
-
High 7.8
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon …
-
High 7.8
Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in …
-
High 8.4
Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon…