| Vulners.com -- Ivanti Updates Log4j Advisory with Security Updates for Multiple Products |
| Vulners.com -- CVE-2021-39623 |
| Vulners.com -- CVE-2021-39618 |
| Vulners.com -- CVE-2021-39625 |
| Vulners.com -- CVE-2021-39622 |
| Vulners.com -- CVE-2021-39620 |
| Vulners.com -- CVE-2021-1035 |
| Vulners.com -- CVE-2021-0959 |
| Vulners.com -- CVE-2021-45058 |
| Vulners.com -- CVE-2021-45057 |
| Vulners.com -- CVE-2021-45056 |
| Vulners.com -- CVE-2021-45055 |
| Vulners.com -- CVE-2021-45053 |
| Vulners.com -- CVE-2021-34937 |
| Vulners.com -- CVE-2021-34922 |
| Vulners.com -- CVE-2021-34903 |
| Vulners.com -- CVE-2021-34876 |
| Vulners.com -- CVE-2021-34936 |
| Vulners.com -- CVE-2021-34920 |
| Vulners.com -- CVE-2021-34900 |
| Vulners.com -- CVE-2021-34935 |
| Vulners.com -- CVE-2021-34918 |
| Vulners.com -- CVE-2021-34898 |
| Vulners.com -- CVE-2021-34933 |
| Vulners.com -- CVE-2021-34919 |
| Vulners.com -- CVE-2021-34899 |
| Vulners.com -- CVE-2021-34934 |
| Vulners.com -- CVE-2021-34917 |
| Vulners.com -- CVE-2021-34897 |
| Vulners.com -- CVE-2021-34932 |
| Vulners.com -- CVE-2021-34914 |
| Vulners.com -- CVE-2021-34896 |
| Vulners.com -- CVE-2021-34931 |
| Vulners.com -- CVE-2021-34915 |
| Vulners.com -- CVE-2021-34895 |
| Vulners.com -- CVE-2021-34930 |
| Vulners.com -- CVE-2021-34913 |
| Vulners.com -- CVE-2021-34894 |
| Vulners.com -- CVE-2021-34929 |
| Vulners.com -- CVE-2021-34912 |
| Vulners.com -- CVE-2021-34893 |
| Vulners.com -- CVE-2021-34946 |
| Vulners.com -- CVE-2021-34928 |
| Vulners.com -- CVE-2021-34911 |
| Vulners.com -- CVE-2021-34892 |
| Vulners.com -- CVE-2021-34945 |
| Vulners.com -- CVE-2021-34924 |
| Vulners.com -- CVE-2021-34908 |
| Vulners.com -- CVE-2021-34891 |
| Vulners.com -- CVE-2021-34942 |
| Vulners.com -- CVE-2021-34927 |
| Vulners.com -- CVE-2021-34909 |
| Vulners.com -- CVE-2021-34885 |
| Vulners.com -- CVE-2021-34941 |
| Vulners.com -- CVE-2021-34926 |
| Vulners.com -- CVE-2021-34907 |
| Vulners.com -- CVE-2021-34880 |
| Vulners.com -- CVE-2021-34940 |
| Vulners.com -- CVE-2021-34923 |
| Vulners.com -- CVE-2021-34905 |
| Vulners.com -- CVE-2021-34879 |
| Vulners.com -- CVE-2021-34938 |
| Vulners.com -- CVE-2021-34925 |
| Vulners.com -- CVE-2021-34906 |
| Vulners.com -- CVE-2021-34878 |
| Vulners.com -- CVE-2021-34939 |
| Vulners.com -- CVE-2021-34921 |
| Vulners.com -- CVE-2021-34904 |
| Vulners.com -- CVE-2021-34877 |
| Vulners.com -- CVE-2021-34874 |
| Vulners.com -- CVE-2021-34875 |
| Vulners.com -- CVE-2021-34872 |
| Vulners.com -- CVE-2021-34873 |
| Vulners.com -- CVE-2021-34871 |
| CVE-2020-28919 -- A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title. |
| CVE-2021-24044 -- By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault |
| CVE-2021-32545 -- Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation.
|
| CVE-2021-33498 -- Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2).
|
| CVE-2021-33499 -- Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2).
|
| CVE-2021-33827 -- The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings. |
| CVE-2021-33828 -- The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection. |
| CVE-2021-33963 -- China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote c |
| CVE-2021-35969 -- Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validation.
|
| CVE-2021-42555 -- Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation.
|
| CVE-2021-44049 -- CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory.
|
| CVE-2021-44537 -- ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution. |
| CVE-2022-23094 -- Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6. |
| CVE-2022-23095 -- Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerability to execute code in the context of the current proc |
| CVE-2022-23178 -- An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, |
| Vulners.com -- CVE-2021-36417 |
| Vulners.com -- CVE-2022-20658 |
| Vulners.com -- Critical Cisco Contact Center Bug Threatens Customer-Service Havoc |
| Vulners.com -- CVE-2021-40574 |
| Vulners.com -- CVE-2021-40570 |
| Vulners.com -- CVE-2021-40571 |
| Vulners.com -- CVE-2021-40568 |
| Vulners.com -- Siemens COMOS Web |
| Vulners.com -- CVE-2021-44515 |
| Vulners.com -- Microsoft SharePoint Server-Side Control Improper Input Validation Remote Code Execution Vulnerability |
| Vulners.com -- CVE-2021-46059 |
| Vulners.com -- Update now: Microsoft patches 97 bugs including 6 zero-days and a wormable one |
| Vulners.com -- First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability |
| Vulners.com -- SonicWall SMA 100 Series Authenticated Command Injection |
| Vulners.com -- CVE-2021-45482 |
| Vulners.com -- CVE-2021-45483 |
| Vulners.com -- CVE-2021-45481 |
| CVE-2021-0959 -- In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: A |
| CVE-2021-1035 -- In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges need |
| CVE-2021-1036 -- In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Pr |
| CVE-2021-1037 -- The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Product: |
| CVE-2021-1049 -- Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722
|
| CVE-2021-20612 -- Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, FX3U-ENET-L Firmware version 1.14 and prior and FX3U-ENET-P502 Firmware version 1.14 and prior allows a remote unauthenticated attacker |
| CVE-2021-20613 -- Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX3U-ENET-P502 Firmware version 1.16 and prior allows a remote unauthenticated attacker to cause a denial-o |
| CVE-2021-23138 -- WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code. |
| CVE-2021-23157 -- WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. |
| CVE-2021-23566 -- The package nanoid before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated. |
| CVE-2021-23567 -- The package colors after 1.4.0 are vulnerable to Denial of Service (DoS) that was introduced through an infinite loop in the americanFlag module.
|
| CVE-2021-23567 -- The package colors after 1.4.0 are vulnerable to Denial of Service (DoS) that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package un |
| CVE-2021-24046 -- A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0. |
| CVE-2021-28501 -- An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration. |
| CVE-2021-28506 -- An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device. |
| CVE-2021-28507 -- An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent. |
| CVE-2021-32649 -- October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework. Prior to versions 1.0.473 and 1.1.6, an attacker with "create, modify and delete website pages" privileges in the backend is able to execute PHP code |
| CVE-2021-32650 -- October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework. Prior to versions 1.0.473 and 1.1.6, an attacker with access to the backend is able to execute PHP code by using the theme import feature. This will |
| CVE-2021-33962 -- China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /api/ZRUsb/pop_usb_device component. |
| CVE-2021-33962 -- China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /api/ZRUsb/pop_usb_device component.
|
| CVE-2021-36199 -- Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop. |
| CVE-2021-36736 -- ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none.
|
| CVE-2021-36781 -- A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0 |
| CVE-2021-36920 -- Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WordPress plugin Download Monitor (versions <= 4.4.6). |
| CVE-2021-38127 -- Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS).
|
| CVE-2021-38677 -- A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of |
| CVE-2021-38678 -- An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the follo |
| CVE-2021-38692 -- A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following ver |
| CVE-2021-39032 -- IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 213962.
|
| CVE-2021-39618 -- In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User in |
| CVE-2021-39620 -- In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produ |
| CVE-2021-39622 -- In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produ |
| CVE-2021-39623 -- In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat |
| CVE-2021-39625 -- In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges |
| CVE-2021-39626 -- In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction i |
| CVE-2021-39627 -- In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed |
| CVE-2021-39628 -- In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed fo |
| CVE-2021-39629 -- In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat |
| CVE-2021-39630 -- In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User inter |
| CVE-2021-39632 -- In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product |
| CVE-2021-39633 -- In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: An |
| CVE-2021-39634 -- In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-2 |
| CVE-2021-3965 -- Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews. |
| CVE-2021-39659 -- In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privilege |
| CVE-2021-39678 -- In of , there is a possible bypass of Factory Reset Protection due to . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersio |
| CVE-2021-39679 -- In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: |
| CVE-2021-39680 -- In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product |
| CVE-2021-39681 -- In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: A |
| CVE-2021-39682 -- In mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl |
| CVE-2021-39683 -- In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: |
| CVE-2021-39684 -- In target_init of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not nee |
| CVE-2021-42067 -- In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not |
| CVE-2021-42551 -- Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC allows an unauthenticated user to craft a reflected Cross-Site Scripting attack. This issue affects: AlCoda NetBiblio WebOPAC versions prior to 4.0.0.320; ver |
| CVE-2021-44234 -- SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information. |
| CVE-2021-44530 -- An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious actor to control the application. |
| CVE-2021-44700 -- Adobe Illustrator versions 25.4.2 (and earlier) and 26.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASL |
| CVE-2021-44703 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a stack buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execu |
| CVE-2021-44709 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in |
| CVE-2021-44711 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2021-44712 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to application denial-of-service. Exploitation o |
| CVE-2021-44713 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in application denial of service. Ex |
| CVE-2021-44714 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Violation of Secure Design Principles that could lead to a Security feature bypass. Acrobat Reader DC displays a warning mess |
| CVE-2021-44739 -- Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obta |
| CVE-2021-44741 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this |
| CVE-2021-44743 -- Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera |
| CVE-2021-44828 -- Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) allows a non-privileged user to achieve write access to read-only memory, and possibly obtain root privileges, corrupt memory, and modify |
| CVE-2021-45051 -- Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabi |
| CVE-2021-45052 -- Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASL |
| CVE-2021-45060 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo |
| CVE-2021-45063 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An |
| CVE-2021-45064 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the c |
| CVE-2021-45067 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to disclosure of sensitive memory. An attacker c |
| CVE-2021-45068 -- Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploita |
| CVE-2021-45406 -- In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query while generating a report. Upon successfully discovering the login admin password hash, it can be decrypted to obtain the plain-text p |
| CVE-2021-45468 -- Imperva Web Application Firewall (WAF) before 2021-12-31 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious HTTP POST requests to web servers behind the WAF. |
| CVE-2021-45468 -- Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious HTTP POST requests to web servers behind the WAF. |
| CVE-2021-45760 -- GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last(). This vulnerability allows attackers to cause a Denial of Service (DoS). |
| CVE-2021-45761 -- ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function. |
| CVE-2021-45762 -- GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This vulnerability allows attackers to cause a Denial of Service (DoS). |
| CVE-2021-45763 -- GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This vulnerability can lead to a Denial of Service (DoS). |
| CVE-2021-45764 -- GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra(). |
| CVE-2021-45767 -- GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id(). This vulnerability can lead to a Denial of Service (DoS). |
| CVE-2021-45769 -- A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash. |
| CVE-2021-45773 -- A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash. |
| CVE-2021-45774 -- A NULL pointer dereference in help() at inetutils/telnet/commands.c of GNU Inetutils v2.2.16-cf091 can lead to a segmentation fault or application crash.
|
| CVE-2021-45775 -- GNU Inetutils 2.2.16-cf091 was discovered to contain an infinite loop in domacro at domacro.c.
|
| CVE-2021-45778 -- A NULL pointer dereference in setnmap() at cmds.c of GNU Inetutils v2.2.16-cf091 can lead to a segmentation fault or application crash.
|
| CVE-2021-45779 -- A NULL pointer dereference in unsetcmd() at inetutils/telnet/commands.c of GNU Inetutils v2.2.16-cf091 can lead to a segmentation fault or application crash.
|
| CVE-2021-45780 -- GNU Inetutils commit cf091 was discovered to contain a memory leak via the ifconfig function.
|
| CVE-2021-45781 -- GNU Inetutils 2.2.16-cf091 was discovered to contain a heap-based buffer overflow via the component logger at inetutils/src/logger.c.
|
| CVE-2021-45782 -- An untrusted pointer dereference in getcmd() at inetutils/src/tftp.c of GNU Inetutils v2.2.16-cf091 can lead to a segmentation fault or application crash.
|
| CVE-2021-46019 -- An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
|
| CVE-2021-46020 -- An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash. |
| CVE-2021-46021 -- An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
|
| CVE-2021-46022 -- An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
|
| CVE-2021-46168 -- Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c. |
| CVE-2021-46169 -- Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache. |
| CVE-2021-46170 -- An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file. |
| CVE-2021-46171 -- Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c. |
| CVE-2021-46195 -- GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources. |
| CVE-2021-46255 -- eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename. |
| CVE-2022-0130 -- Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could allow a remote, unauthenticated attacker to execute code under special circumstances. An attacker would first have to stage a specific file t |
| CVE-2022-0224 -- dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command |
| CVE-2022-20647 -- Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient |
| CVE-2022-20658 -- A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified Contact Center Domain Manager (Unified CCDM) could allow an authenticated, remote attacker to elevate their privileges |
| CVE-2022-20660 -- A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device. This vulnerability is due to unencrypted storage of conf |
| CVE-2022-20660 --
|
| CVE-2022-20698 -- A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vu |
| CVE-2022-21137 -- Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project files, which may allow an attacker to execute arbitrary code. |
| CVE-2022-21677 -- Discourse is an open source discussion platform. Discourse groups can be configured with varying visibility levels for the group as well as the group members. By default, a newly created group has its visibility set to public and the group's members visib |
| CVE-2022-21680 -- Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastrophic backtracking against some strings and lead to a regular expression denial of service (ReDoS). Anyone who runs untrusted markdown t |
| CVE-2022-21681 -- Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic backtracking against some strings and lead to a denial of service (DoS). Anyone who runs untrusted markdown through a v |
| CVE-2022-21685 -- Frontier is Substrate's Ethereum compatibility layer. Prior to commit number `8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664`, a bug in Frontier's MODEXP precompile implementation can cause an integer underflow in certain conditions. This will cause a node cras |
| CVE-2022-22054 -- ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arb |
| CVE-2022-22055 -- The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the sys |
| CVE-2022-22056 -- The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticated remote attacker to acquire administrator’s privilege and control the system or disrupt service.
|
| CVE-2022-22290 -- Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page. |
| CVE-2022-22529 -- SAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled inputs which may lead to an unauthorized attacker possibly exploit XSS vulnerability. The UIs in ETD are using SAP UI5 standard controls, the UI5 framework p |
| CVE-2022-22530 -- The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could |
| CVE-2022-22531 -- The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive infor |
| CVE-2022-23218 -- The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a |
| CVE-2022-23219 -- The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a |
| CVE-2022-23222 -- kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.
|
| CVE-2022-23227 -- NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it |
| Vulners.com -- Pillow vulnerabilities |
| Vulners.com -- US Military Ties Prolific MuddyWater Cyberespionage APT to Iran |
| Vulners.com -- Analytics Are Essential for Effective Database Security |
| Vulners.com -- WECON LeviStudioU UMP File Parsing XY Tag WordAddr9 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing Alarm Tag WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing Alarm Tag bitaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing BaseSet Tag HMINAME Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing XY Tag WordAddr5 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing BaseSet Tag CurScrIdAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing BaseSet Tag ScrIdWordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- Fatek Automation WinProladder TAB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing BaseSet Tag EnterTime Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing XY Tag WordAddr7 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- Fatek Automation WinProladder SPF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing Trend Tag WordAddr11 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing Trend Tag WordAddr12 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing XY Tag WordAddr6 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing HmiSet Tag Style Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- WECON LeviStudioU UMP File Parsing BaseSet Tag PowerEnterTime Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| Vulners.com -- The BlueNoroff cryptocurrency hunt is still on |
| Vulners.com -- Iranian Hackers Exploit Log4j Vulnerability to Deploy PowerShell Backdoor |
| Vulners.com -- US Cyber Command Links 'MuddyWater' Hacking Group to Iranian Intelligence |
| Vulners.com -- CVE-2019-11734 |
| Vulners.com -- CVE-2019-11735 |
| Vulners.com -- CVE-2019-11716 |
| Vulners.com -- CVE-2019-11714 |
| Vulners.com -- CVE-2018-15908 |
| Vulners.com -- Widespread, Easily Exploitable Windows RDP Bug Opens Users to Data Theft |
| Vulners.com -- CVE-2021-40010 |
| Vulners.com -- CVE-2021-39996 |
| Vulners.com -- CVE-2021-39998 |
| Vulners.com -- Linux kernel regression |
| Vulners.com -- CVE-2021-37218 |
| Vulners.com -- CVE-2021-4192 |
| Vulners.com -- Security update for MozillaThunderbird (important) |
| Vulners.com -- BADNEWS! Patchwork APT Hackers Score Own Goal in Recent Malware Attacks |
| Vulners.com -- Citrix Hypervisor Security Update |
| Vulners.com -- CVE-2021-45046 |
| Vulners.com -- FBI, NSA and CISA Warns of Russian Hackers Targeting Critical Infrastructure |
| Vulners.com -- CVE-2021-44228 (Log4Shell) |
| Vulners.com -- webkitgtk4 security update |
| Vulners.com -- Unbreakable Enterprise kernel security update |
| Vulners.com -- lxml vulnerability |
| Vulners.com -- Apache HTTP Server vulnerabilities |
| Vulners.com -- Log4Shell HTTP Header Injection |
| Vulners.com -- CVE-2021-1048 |
| Vulners.com -- Security update for net-snmp (important) |
| Vulners.com -- Unbreakable Enterprise kernel-container security update |
| Vulners.com -- Critical SonicWall NAC Vulnerability Stems from Apache Mods |
| Vulners.com -- CVE-2021-45461 |
| Vulners.com -- Millions of Routers Exposed to RCE by USB Kernel Bug |
| Vulners.com -- CVE-2021-0920 |
| Vulners.com -- New KCodes NetUSB Bug Affect Millions of Routers from Different Vendors |
| Vulners.com -- Google Chrome WebRTC RTPSenderVideoFrameTransformerDelegate memory corruption vulnerability |
| Vulners.com -- (RHSA-2022:0082) Critical: Red Hat Process Automation Manager 7.11.1 security update |
| Vulners.com -- CVE-2021-44077 |
| Vulners.com -- (RHSA-2022:0075) Moderate: webkit2gtk3 security update |
| Vulners.com -- CVE-2021-38003 |
| Vulners.com -- (RHSA-2022:0073) Moderate: cpio security update |
| Vulners.com -- CISA Adds 15 Known Exploited Vulnerabilities to Catalog |
| Vulners.com -- Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability |
| Vulners.com -- (RHSA-2022:0059) Moderate: webkitgtk4 security update |
| Vulners.com -- VUPlayer 2.49 Buffer Overflow |
| Vulners.com -- Cisco Tetration Command Injection Vulnerability |
| Vulners.com -- Linux kernel (OEM) vulnerabilities |
| Vulners.com -- Cisco Prime Infrastructure and Evolved Programmable Network Manager Vulnerabilities |
| Vulners.com -- (RHSA-2022:0044) Important: Red Hat OpenShift Enterprise Logging bug fix and security update (5.3.2) |
| CVE-2021-23227 -- Cross-Site Request Forgery (CSRF) vulnerability discovered in PHP Everywhere (WordPress plugin) versions (<= 2.0.2). |
| CVE-2021-23514 -- This affects the package Crow before 0.3+4.
|
| CVE-2021-23514 -- This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the server. |
| CVE-2021-23824 -- This affects the package Crow before 0.3+4. When using attributes without quotes in the template, an attacker can manipulate the input to introduce additional attributes, potentially executing code. This may lead to a Cross-site Scripting (XSS) vulnerabil |
| CVE-2021-30285 -- Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrast |
| CVE-2021-30287 -- Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile |
| CVE-2021-30300 -- Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT |
| CVE-2021-30301 -- Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile |
| CVE-2021-30307 -- Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT |
| CVE-2021-30308 -- Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile |
| CVE-2021-30311 -- Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile |
| CVE-2021-30313 -- Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sn |
| CVE-2021-30314 -- Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wear |
| CVE-2021-30319 -- Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdrag |
| CVE-2021-30330 -- Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables |
| CVE-2021-30353 -- Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wea |
| CVE-2021-33046 -- Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords. |
| CVE-2021-34858 -- This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific |
| CVE-2021-34944 -- This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a maliciou |
| CVE-2021-34946 -- This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. |
| CVE-2021-34977 -- This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the process |
| CVE-2021-34979 -- This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of |
| CVE-2021-34980 -- This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard |
| CVE-2021-34985 -- This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open |
| CVE-2021-34993 -- This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CVSearchService service. The is |
| CVE-2021-34997 -- This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The sp |
| CVE-2021-34998 -- This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vu |
| CVE-2021-39056 -- The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537.
|
| CVE-2021-39056 -- The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537.
|
| CVE-2021-40327 -- Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key (held by the Crypto service) based solely on knowledge of its key ID. For example, there is no authorization check associated with the |
| CVE-2021-40567 -- Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gf_odf_size_descriptor function in desc_private.c when using mp4box, which causes a denial of service. |
| CVE-2021-40568 -- A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in av_parsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges. |
| CVE-2021-40569 -- The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.c, which allows attackers to cause a denial of service. |
| CVE-2021-40570 -- The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges. |
| CVE-2021-40571 -- The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges. |
| CVE-2021-40572 -- The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a denial of service. |
| CVE-2021-40573 -- The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a denial of service. |
| CVE-2021-40574 -- The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges. |
| CVE-2021-40575 -- The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in reframe_mpgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fix for CVE-2021-4 |
| CVE-2021-40576 -- The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf_isom_get_payt_count function in hint_track.c, which allows attackers to cause a denial of service. |
| CVE-2021-40722 -- AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacker to achieve RCE. |
| CVE-2021-40813 -- A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames. |
| CVE-2021-43761 -- AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulne |
| CVE-2021-43762 -- AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls. Sensitive areas of the web application may be exposed through exploitation of the vuln |
| CVE-2021-44177 -- AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may b |
| CVE-2021-44178 -- AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a reflected Cross-Site Scripting (XSS) vulnerability via the itemResourceType parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnera |
| CVE-2021-45054 -- Adobe InCopy version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. |
| CVE-2021-45055 -- Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute co |
| CVE-2021-45056 -- Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a |
| CVE-2021-45058 -- Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open |
| CVE-2021-45059 -- Adobe InDesign version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASL |
| CVE-2021-45422 -- Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET. No authentication is required.
|
| CVE-2021-45806 -- jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code. |
| CVE-2021-45807 -- jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall. |
| CVE-2022-0197 -- phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2022-0197 -- phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
|
| CVE-2022-0198 -- corenlp is vulnerable to Improper Restriction of XML External Entity Reference |
| CVE-2022-21678 -- Discourse is an open source discussion platform. Prior to version 2.8.0.beta11 in the `tests-passed` branch, version 2.8.0.beta11 in the `beta` branch, and version 2.7.13 in the `stable` branch, the bios of users who made their profiles private were still |
| CVE-2022-21682 -- Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies `finish-args` last in the build. At this point the build directory will ha |
| CVE-2022-21684 -- Discourse is an open source discussion platform. Versions prior to 2.7.13 in `stable`, 2.8.0.beta11 in `beta`, and 2.8.0.beta11 in `tests-passed` allow some users to log in to a community before they should be able to do so. A user invited via email to a |
| CVE-2022-22112 -- In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low privileged attacker can input template injection payloads in the application at various locations to execute JavaScript on th |
| CVE-2022-22113 -- In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application eve |
| CVE-2022-22122 -- In Mattermost Focalboard, versions prior to v0.7.5, v0.8.4, v0.9.5, v0.10.1 and v0.11.0-rc1; as used respectively in Mattermost, versions prior to v5.37.6, v5.39.3, v6.0.4, v6.1.1 and v6.2.0, are vulnerable to Insufficient Session Expiration. When a user |
| CVE-2022-22123 -- In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title. An authenticated attacker can inject arbitrary javascript code that will execute on a victim’s server. |
| CVE-2022-22124 -- In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can upload a carefully crafted SVG file that will trigger arbitrary javascript to run on a victim’s browser. |
| CVE-2022-22125 -- In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article tag. An authenticated admin attacker can inject arbitrary javascript code that will execute on a victim’s server. |
| CVE-2022-22988 -- File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources.
|
| CVE-2022-22989 -- My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service. Addressed the vulnerability by adding defenses against stack overflow issues.c
|
| CVE-2022-22989 -- My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service. Addressed the vulnerability by adding defenses against stack overflow issues.
|
| CVE-2022-22990 -- A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices. Addressed this vulnerability by changing access token validation logic and rewritin |
| CVE-2022-22991 -- A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP.
|
| CVE-2022-23131 -- In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to |
| CVE-2022-23132 -- During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system lev |
| CVE-2022-23133 -- An authenticated user can create a hosts group from the configuration with XSS payload, which will be available for other users. When XSS is stored by an authenticated malicious actor and other users try to search for groups during new host creation, the |
| CVE-2022-23134 -- After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend. |
