28 January 2022

83 results · Clear filters · Feed

• High 8.6
  CVE-2021-44378

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44377

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44376

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44374

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44373

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44372

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44371

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44370

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44369

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44368

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44367

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44365

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44364

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44363

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44362

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44360

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44361

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44359

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 8.6
  CVE-2021-44358

  A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  Jan 28, 2022
• High 7.3
  CVE-2021-23558

  Prototype Pollution

  The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. **Note:** This vulnerability derives from an incomplete fix in [CVE-2020-7736](https://security.snyk.io/vuln/SNYK-JS-BMOOR-598664)

  bmoor npm
  Jan 28, 2022
• High 8.4
  CVE-2022-0393

  Out-of-bounds Read in vim/vim

  Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

  vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  Jan 28, 2022
• High 8.5
  CVE-2022-0352

  Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web

  Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.

  janeczku janeczku/calibre-web calibreweb PyPI
  Jan 28, 2022
• High 8.8
  CVE-2022-22994

  Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.

  A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an attacker could trick a NAS device into loading through an unsecured HTTP call. This was a result insufficient verification of calls to the device. The vulnerabil…

  Western Digital My Cloud
  Jan 28, 2022
• High 7.8
  CVE-2022-22992

  Command Injection Remote Code Execution vulnerability on Western Digital My Cloud devices.

  A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the device. The vulnerability was addressed by escaping individual arguments to she…

  Jan 28, 2022
• High 7.1
  CVE-2021-40416

  An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RL…

  Jan 28, 2022
• High 7.1
  CVE-2021-40415

  An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RL…

  Jan 28, 2022
• High 7.1
  CVE-2021-40414

  An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RL…

  Jan 28, 2022
• High 7.1
  CVE-2021-40413

  An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RL…

  Jan 28, 2022
• High 7.5
  CVE-2021-40406

  A denial of service vulnerability exists in the cgiserver.cgi session creation functionality of reolink RLC-410W v3.0.0…

  Jan 28, 2022
• High 8.3
  CVE-2022-21134

  A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0…

  Jan 28, 2022
• High 7.5
  CVE-2022-21199

  An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A …

  Jan 28, 2022
• High 8.6
  CVE-2022-21801

  A denial of service vulnerability exists in the netserver recv_command functionality of reolink RLC-410W v3.0.0.136_201…

  Jan 28, 2022
• High 7.5
  CVE-2021-40423

  A denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of Reolink RLC-410W v3.0…

  Jan 28, 2022
• High 8.1
  CVE-2022-21236

  An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_…

  Jan 28, 2022
• High 8.1
  CVE-2021-44463

  Emerson DeltaV Uncontrolled Search Path Element

  Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started.

  Jan 28, 2022
• High 8.0
  CVE-2021-22825

  A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker…

  Jan 28, 2022
• High 8.8
  CVE-2021-27654

  Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.

  Pega Systems Pega Infinity
  Jan 28, 2022
• High 7.8
  CVE-2022-22993

  Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.

  A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing access controls. The vulnerability was addressed by creating a whitelist for val…

  Western Digital My Cloud
  Jan 28, 2022
• High 8.8
  CVE-2021-40396

  A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-craft…

  Jan 28, 2022
• High 8.8
  CVE-2021-40397

  A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9. A specially-cr…

  Jan 28, 2022