Archive
2 December 2021
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
Taocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Management colu…
-
Unscored —
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article.
-
Unscored —
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search.
-
Unscored —
Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php.
-
Unscored —
An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafte…
-
Unscored —
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.
-
Unscored —
LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.
-
Unscored —
An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID k…
-
Critical 9.0
Weak default credential associated with TCP port 26
Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi En…
-
High 8.6
SSH activation problem in the proprietary management protocol (port TCP 5558)
Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. Thi…
-
Unscored —
CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due…
-
High 7.5
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeria
Armeria is an open source microservice framework. In affected versions an attacker can access an Armeria server's local file system beyond its restricted directory by sending an HTTP request whose path contains `%2F` (encoded `/`), such as `/files/..%2Fsecret…
-
Unscored —
ClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site Scripting
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
-
Unscored —
ClickBank Affiliate Ads <= 1.20 - CSRF to Stored Cross-Site Scripting
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could a…
-
Unscored —
An issue was discovered in the eGeeTouch 3rd Generation Travel Padlock application for Android. The lock sends a pairin…
-
Low 3.1
Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack
bookstack is vulnerable to Cross-Site Request Forgery (CSRF)
-
High 8.1
Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search
Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.
-
Medium 5.9
Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine
Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/*, /templates/* and some of the files in /.git/* (non-binary).
-
Medium 4.2
Snakeyaml deserialization vulnerability bypass
Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE.
-
Medium 6.5
Stored XSS Vulnerability in File Name of the File Upload function
Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site.
-
Medium 4.5
Overriding the system configuration file causes a denial of service
Authenticated administrators may override the system configuration file and cause a denial of service.
-
Medium 4.2
Groovy Sandbox Bypass
Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remot…
-
Medium 4.2
Spring SPEL Expression Language Injection
Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers to execute arbitrary commands remotely (RCE).
-
Unscored —
ecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\ecshop\upload\api\client\api.php.
-
Unscored —
thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseControl…
-
Unscored —
SakuraPanel v1.0.1.1 is affected by a Cross Site Scripting (XSS) vulnerability in /master/core/PostHandler.php. The exi…
-
Unscored —
pictshare v1.5 is affected by a Cross Site Scripting (XSS) vulnerability in api/info.php. The exit function will termin…
-
Unscored —
nZEDb v0.4.20 is affected by a Cross Site Scripting (XSS) vulnerability in www/pages/api.php. The exit function will te…
-
Unscored —
Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concen…
-
Unscored —
Mahavitaran android application 7.50 and prior transmit sensitive information in URL parameters. This may lead to infor…
-
High 8.8
Cross Site Request Forgery in mailman
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
-
Medium 6.5
Ineffective expiration validation for invitation links in Zulip
Zulip is an open source group chat application that combines real-time chat with threaded conversations. In affected versions expiration dates on the confirmation objects associated with email invitations were not enforced properly in the new account registra…
-
Unscored —
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.
-
Unscored —
AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.
-
Unscored —
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
-
Unscored —
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
-
Unscored —
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
-
Unscored —
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.