Archive
17 December 2021
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o…
-
Unscored —
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o…
-
Unscored —
In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of …
-
Unscored —
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privil…
-
Unscored —
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o…
-
Unscored —
In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local …
-
Unscored —
In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information …
-
Unscored —
SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to th…
-
Unscored —
SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal t…
-
Unscored —
SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS…
-
Medium 4.4
Wolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an authenticated user may download an…
-
Unscored —
A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote una…
-
Unscored —
In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the In…
-
Unscored —
A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.
-
Medium 6.1
Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.
Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting (XSS) vulnerability in Wechat.php.
-
High 7.3
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
-
High 8.1
Unauthorized data access from replicas through vulnerable instance manager pods
A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access t…
-
Critical 9.6
Host operations allowed in privileged Longhorn managed pods
A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3;…
-
Medium 6.5
Apache NiFi information disclosure by XXE
In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information.
-
Unscored —CVE-2021-41843 EPSS 13%
An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker…
-
Unscored —
A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in …
-
Unscored —
A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in …
-
Unscored —
A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in …
-
Unscored —
A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in …
-
Unscored —
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=…
-
Unscored —
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to u…