CVE-2021-42716

An issue was discovered in stb stbimage.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stbimage, or...

CVE-2021-42716

An issue was discovered in stb stbimage.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stbimage, or...

CVE-2021-42716

An issue was discovered in stb stbimage.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stbimage, or...

CVE-2021-38480

creationtimestamp| type| source ---|---|--- 2021-10-19 16:33:25+00:00| seen| https://t.me/cibsecurity/30762...

CVE-2021-38478

creationtimestamp| type| source ---|---|--- 2021-10-19 16:33:18+00:00| seen| https://t.me/cibsecurity/30758...

PT-2021-21377 · Unknown · Wordpress Popup

Name of the Vulnerable Software and Affected Versions: WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 Description: The issue concerns the headline input, specifically at the &message data16headline variable. This input is vulnerable, potentially allowi...

CVE-2021-41991

creationtimestamp| type| source ---|---|--- 2021-10-18 18:32:07+00:00| seen| https://t.me/cibsecurity/30704 2025-09-16 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-259-03...

CVE-2021-41990

creationtimestamp| type| source ---|---|--- 2021-10-18 18:31:59+00:00| seen| https://t.me/cibsecurity/30699 2025-09-16 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-259-03...

CVE-2021-38438

creationtimestamp| type| source ---|---|--- 2021-10-18 16:32:13+00:00| seen| https://t.me/cibsecurity/30692...

CVE-2018-16060

creationtimestamp| type| source ---|---|--- 2021-10-16 00:28:55+00:00| seen| https://t.me/cibsecurity/30665...

CVE-2021-37736

creationtimestamp| type| source ---|---|--- 2021-10-15 16:28:54+00:00| seen| https://t.me/cibsecurity/30620...

Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19

Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 Vaadin 10.0.0 through 10.0.18, 1.1.0 prior to 2.0.0 Vaadin 11 prior to 14, 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, and 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0....

KB5006699: Windows Server 2022 Security Update (October 2021)

The remote Windows host is missing security update 5006699. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...

KB5006674: Windows 11 Security Update (October 2021)

The remote Windows host is missing security update 5006674. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...

cuonganhhome.com Cross Site Scripting vulnerability OBB-2154943

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2021-0612

creationtimestamp| type| source ---|---|--- 2021-09-27 16:34:52+00:00| seen| https://t.me/cibsecurity/29453...

CVE-2021-23054

On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system...

Cross site scripting

On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system...

CVE-2021-38412

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...

Authentication flaw

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...