Archive
12 November 2021
Vulnerabilities first published on this day (UTC), newest first.
73 results · Feed
-
Unscored —
ServerManagement master branch as of commit 49491cc6f94980e6be7791d17be947c27071eb56 is affected by a directory travers…
-
Unscored —
OpenCV-REST-API master branch as of commit 69be158c05d4dd5a4aff38fdc680a162dd6b9e49 is affected by a directory traversa…
-
Unscored —
Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vul…
-
High 7.8
OS Command Injection in ohmyzsh/ohmyzsh
ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command
-
High 8.1
Agent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files
Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier implements an agent-to-controller message that does not implement any validation of its input, allowing attackers able to control agent processes to replace arbitrary files on the Jenkins c…
-
High 7.1
XXE vulnerability in Jenkins OWASP Dependency-Check Plugin
Jenkins OWASP Dependency-Check Plugin 5.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
-
Medium 6.5
XXE vulnerability in Jenkins pom2config Plugin
Jenkins pom2config Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers with Overall/Read and Item/Read permissions to have Jenkins parse a crafted XML file that uses external entities for e…
-
Medium 6.5
XXE vulnerability in Jenkins Performance Plugin
Jenkins Performance Plugin 3.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
-
Medium 5.4
Stored XSS vulnerability in Jenkins Scriptler Plugin
Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by exploitable by attackers able to create Scriptler scrip…
-
Medium 5.4CVE-2021-21699 EPSS 88%
Stored XSS vulnerability in Jenkins Active Choices Plugin
Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
-
Critical 9.8
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapd…
-
High 7.5
Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snap…
-
Medium 6.7
Possible use after free due to improper memory validation when initializing new interface via Interface add command in …
-
Medium 6.7
Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing …
-
Medium 6.7
Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto,…
-
Medium 6.7
Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concu…
-
High 7.8
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Comput…
-
High 7.8
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Com…
-
High 7.8
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Au…
-
High 7.5
Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Sn…
-
High 7.5
Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Sna…
-
High 7.8
Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snap…
-
Critical 9.8
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdr…
-
High 7.8
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon …
-
Critical 9.0
Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto,…
-
High 7.8
Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in …
-
High 8.4
Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon…
-
Medium 5.3
Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon o…
-
Low 3.7CVE-2021-37910 Public exploit
ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication
ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.
-
Unscored —
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictl…
-
Unscored —
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictl…
-
Unscored —
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictl…
-
Medium 4.3
Memory leak in BlueZ
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over …