December 2021

332 results · Clear filters · Feed

• Medium 6.1
  CVE-2021-40154 Public exploit

  NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration re…

  Dec 1, 2021
• Medium 5.4
  CVE-2021-25967

  CKAN - Stored Cross-Site Scripting (XSS) via SVG File Upload

  In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file upload of users’ profile picture. This allows low privileged application users to store malicious scripts in their profile picture. These scripts are executed in a victim…

  ckan ckan ckan PyPI
  Dec 1, 2021
• Medium 6.1
  CVE-2021-44277

  Cross-site Scripting in LibreNMS

  Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php.

  librenms/librenms Packagist
  Dec 1, 2021
• Medium 6.1
  CVE-2021-44279

  Cross-site Scripting in LibreNMS

  Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php.

  librenms/librenms Packagist
  Dec 1, 2021
• Medium 4.3
  CVE-2021-3964

  Authorization Bypass Through User-Controlled Key in elgg/elgg

  elgg is vulnerable to Authorization Bypass Through User-Controlled Key

  Elgg elgg/elgg elgg/elgg Packagist
  Dec 1, 2021
• Medium 6.3
  CVE-2021-3983

  Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2

  kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  kevinpapst kevinpapst/kimai2 kevinpapst/kimai2 Packagist
  Dec 1, 2021
• Medium 6.5
  CVE-2021-3989

  Open Redirect in star7th/showdoc

  showdoc is vulnerable to URL Redirection to Untrusted Site

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 1, 2021
• Medium 6.5
  CVE-2021-3990

  Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

  showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 1, 2021
• Medium 6.5
  CVE-2021-3992

  Improper Access Control in kevinpapst/kimai2

  kimai2 is vulnerable to Improper Access Control

  kevinpapst kevinpapst/kimai2 kevinpapst/kimai2 Packagist
  Dec 1, 2021
• Medium 4.3
  CVE-2021-3993

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 1, 2021
• Medium 4.3
  CVE-2021-4015

  Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

  firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

  firefly-iii firefly-iii/firefly-iii grumpydictator/firefly-iii Packagist
  Dec 1, 2021
• Medium 6.3
  CVE-2021-4018

  Cross-site Scripting (XSS) - Stored in snipe/snipe-it

  snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Dec 1, 2021