Archive
8 December 2021
Vulnerabilities first published on this day (UTC), newest first.
138 results · Feed
-
Unscored —
SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerabil…
-
Unscored —CVE-2021-20045 EPSS 25%
A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated …
-
Unscored —CVE-2021-20044 EPSS 40%
A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker…
-
Unscored —CVE-2021-20043 EPSS 23%
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attack…
-
Unscored —
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass …
-
Unscored —CVE-2021-20041 EPSS 21%
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100…
-
Unscored —CVE-2021-20040 EPSS 25%
A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload…
-
High 8.8
Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method all…
-
Critical 9.8
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…
KEV Jan 28, 2022 -
Unscored —
The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence w…
-
Unscored —
74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help_list&…
-
Unscored —
DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management acces…
-
High 8.8
KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.
-
High 7.5
KNIME Server before 4.13.4 allows directory traversal in a request for a client profile.
-
Critical 9.8
A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execu…
KEV Mar 25, 2024 -
Unscored —CVE-2021-43527 EPSS 18%
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DE…