Archive
28 March 2022
Vulnerabilities first published on this day (UTC), newest first.
113 results · Feed
-
Unscored —
BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of info…
-
Unscored —
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.
-
Unscored —
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.
-
Unscored —
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.
-
Unscored —
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.
-
Unscored —
A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicio…
-
Unscored —
lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf(…
-
High 7.6
Deserialization of untrusted data in C1 CMS.
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network o…
-
Unscored —
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
-
Unscored —
A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote …
-
Unscored —
A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote m…
-
Unscored —
A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets …
-
Unscored —
A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote …
-
Unscored —
An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction…
-
Unscored —
A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function.
-
Unscored —
A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a m…
-
Unscored —
Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.
-
Medium 4.3
WEKA INTEREST Security Scanner Portscan memory allocation
A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be i…
-
Low 2.8
WEKA INTEREST Security Scanner LAN Viewer denial of service
A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a re…
-
Low 2.8
WEKA INTEREST Security Scanner Webspider denial of service
A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affected by this issue is some unknown functionality of the component Webspider. The manipulation with an unknown input leads to denial of servic…
-
Low 2.8
WEKA INTEREST Security Scanner Stresstest Configuration denial of service
A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration Handler. A manipulation leads to a local denial of service. The exploit has been disclosed to the p…
-
Low 2.8
WEKA INTEREST Security Scanner Stresstest Scheme denial of service
A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the pu…
-
Low 2.8
WEKA INTEREST Security Scanner HTTP denial of service
A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Handler. The manipulation with an unknown input leads to denial of service. It is possible to l…
-
Medium 5.3
Shemes GrabIt NZB Date Parser denial of service
A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input 1000000000000000 as part of a NZB File leads to a denial of s…
-
Medium 5.5
Pro2col Stingray FTS cross site scriting
A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remotely. It is recommended to upgrade the affected component. N…
-
Medium 5.4
Netegrity SiteMinder Login smpwservicescgi.exe redirect
A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. …
-
Medium 5.0
ISS BlackICE PC Protection Update cross site scriting
A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scripting. The attack may be launched remotely. The exploit has…
-
Low 3.7
ISS BlackICE PC Protection Update cleartext transmission
A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the component Update Handler which allows cleartext transmission of data. NOTE: This vulnerability only affects products that are n…
-
Medium 5.3
ISS BlackICE PC Protection Cross Site Scripting Detection privileges management
A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack m…
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Pri…
-
Medium 4.7
An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLa…
-
Medium 5.4
A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulner…
-
Medium 4.3
In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of …
-
Low 3.5
An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trig…
-
Low 3.1
A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since r…
-
Low 3.1
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting f…
-
Medium 5.9
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…
-
High 7.7
Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows …
-
Medium 4.2
An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting f…
-
Medium 6.5
Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to…