Archive
22 December 2021
Vulnerabilities first published on this day (UTC), newest first.
38 results · Clear filters · Feed
-
High 8.7
Cross-Site Scripting in AjaxNetProfessional
Ajax.NET Professional (AjaxPro) is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected cor…
-
High 7.7
An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy H…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at‘ stat_f…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘sn_fil…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘prod_f…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘mac_fi…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7CVE-2021-21924 EPSS 20%
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger…
-
High 7.7
An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021)…
-
High 7.7
An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021)…
-
High 7.7
An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021)…
-
High 8.8
A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-S…
-
High 8.8
A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-S…
-
High 8.8
A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-S…
-
High 7.5
Delta Electronics DIAEnergie (Update A)
DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.
-
High 7.5
Delta Electronics DIAEnergie (Update A)
DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.
-
High 7.5
Delta Electronics DIAEnergie (Update A)
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.ashx”.
-
High 8.2
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module …
-
High 8.2
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module …
-
High 7.5
An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Mo…
-
High 7.2
A directory traversal vulnerability exists in the Web Manager FsMove functionality of Lantronix PremierWave 2050 8.9.0.…
-
High 7.2
A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.…
-
High 7.3
Potential integer underflow upon receiving STUN message in PJSIP
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the he…
-
High 7.3
Out-of-bounds read when parsing RTCP BYE message in PJSIP
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this dec…