Archive
23 December 2021
Vulnerabilities first published on this day (UTC), newest first.
94 results · Feed
-
Unscored —
An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumer…
-
Unscored —
lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular e…
-
Unscored —
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive…
-
Unscored —
StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a vulnerability which ma…
-
Unscored —
NetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a vulnerability which when succe…
-
Unscored —
A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Send…
-
Medium 6.5
Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman
A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the hos…
-
Unscored —
An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when P…
-
Unscored —
A memory leak vulnerability was found in Privoxy when handling errors.
-
Unscored —
A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory wh…
-
Unscored —
A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec…
-
Unscored —
The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use t…
-
Critical 9.1
mySCADA myPRO
An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.
-
Critical 10.0
mySCADA myPRO
mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.
-
High 7.5
mySCADA myPRO
mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.
-
Critical 10.0
mySCADA myPRO
mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands.
-
Critical 10.0
mySCADA myPRO
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.
-
Critical 10.0
mySCADA myPRO
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.
-
Critical 9.8
mySCADA myPRO
An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.
-
Critical 10.0
mySCADA myPRO
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.
-
Medium 5.3
HTTP PUT & DELETE Methods Enabled
The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. Whi…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Se…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, macOS Monterey…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.4, Security Updat…
-
Unscored —
This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 …
-
Unscored —
An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra …
-
Unscored —
This issue was addressed with improved entitlements. This issue is fixed in watchOS 6, tvOS 13, macOS Catalina 10.15, i…
-
Unscored —
A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iClo…
-
Unscored —
CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14. Description: A logic issue was addresse…
-
Unscored —
A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update…
-
Unscored —
An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High S…
-
Unscored —
An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This i…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1…
-
Unscored —
A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1…
-
Unscored —
An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user informatio…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13. …
-
Unscored —
A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierr…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 11.2, watchOS 4.2. An…
-
Unscored —
An issue existed in preventing the uploading of CallKit call history to iCloud. This issue was addressed through improv…
-
Unscored —
A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implemen…