Archive
8 December 2021
Vulnerabilities first published on this day (UTC), newest first.
138 results · Feed
-
Unscored —
There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabili…
-
Unscored —
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to …
-
Unscored —
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to …
-
Unscored —
There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of t…
-
Unscored —
There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLA…
-
Unscored —
There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause ad…
-
Unscored —
There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Unscored —
There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnera…
-
Unscored —
There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability …
-
Unscored —
There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device t…
-
Unscored —
There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affe…
-
Unscored —
There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Unscored —
There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Unscored —
There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may…
-
Medium 5.3
An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Rep…
-
Medium 6.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4…
-
Medium 6.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4…
-
Medium 5.5
A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below a…
-
High 7.5
A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenti…
-
Medium 4.1
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below al…
-
High 7.3
A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute…
-
Medium 6.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4…
-
Medium 4.3
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and …
-
High 8.1
An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an …
-
High 7.5
A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retr…
-
High 7.5
A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may a…
-
Medium 6.3
An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2…
-
Medium 5.3
A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSa…
-
Medium 5.4
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6…
-
High 8.8
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6…
-
Medium 6.4
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6…
-
High 8.3
A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.…
-
Unscored —
National Library of the Netherlands multiNER <= c0440948057afc6e3d6b4903a7c05e666b94a3bc is affected by an XML External…
-
Unscored —
National Library of the Netherlands digger < 6697d1269d981e35e11f240725b16401b5ce3db5 is affected by a XML External Ent…
-
Medium 6.3
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may all…
-
Medium 6.1
Denial of Service in Database Security on Windows
A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed…
-
High 8.8
An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote at…
-
High 8.1
Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management …
-
Medium 6.1
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
-
High 7.8
An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0…