Archive
28 December 2021
Vulnerabilities first published on this day (UTC), newest first.
28 results · Feed
-
Medium 6.6
Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control o…
-
Unscored —
SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows atta…
-
Unscored —
The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be config…
-
Unscored —
Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download a…
-
Unscored —
An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020…
-
High 7.8
FATEK Automation WinProladder
FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.
-
High 7.8
FATEK Automation WinProladder
FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code.
-
High —
Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.
-
Unscored —CVE-2021-45814 Public exploit
Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel…
-
Unscored —
SLICAN WebCTI 1.01 2015 is affected by a Cross Site Scripting (XSS) vulnerability. The attacker can steal the user's se…
-
Unscored —
NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting (XSS) vulnerability. An attacker can st…
-
Unscored —
A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35, and 7.11.x and 7.12.x be…
-
Unscored —
ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_L…
-
Unscored —
A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated user…
-
Unscored —CVE-2021-45425 Public exploit
Reflected Cross Site Scripting (XSS) in SAFARI Montage versions 8.3 and 8.5 allows remote attackers to execute JavaScri…
-
Unscored —
An attacker may obtain the user credentials from the communication between the PLC and the software. As a result, the P…
-
Unscored —
An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As …
-
Unscored —
https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected …
-
Medium 6.4
A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local …
-
Medium 6.8
A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmwar…
-
Medium 6.6
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
-
Medium 4.3
Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
-
Unscored —
Yappli is an application development platform which provides the function to access a requested URL using Custom URL Sc…
-
Unscored —
An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while loop. An attacker has…
-
Unscored —
An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function.…
-
Unscored —
An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an a…
-
Unscored —
An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attac…
-
Unscored —
An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has l…