CVE-2021-40711: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager version 6.5.9.0 and earlier is affected by a stored XSS vulnerability when creating Content Fragments. An authenticated attacker can send a malformed POST request to achieve arbitrary code execution. Malicious JavaScript may be executed in a victim’s browser when they...

CVE-2021-41580: Undefined Security Weakness

The passport-oauth2 package before 1.6.1 for Node.js mishandles the error condition of failure to obtain an access token. This is exploitable in certain use cases where an OAuth identity provider uses an HTTP 200 status code for authentication-failure error reports, and an application grants...

CVE-2021-24660: Improper Neutralization of Input During Web Page Generation

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode...

CVE-2021-41503: Improper Authentication

DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This...

CVE-2021-22006: Undefined Security Weakness

The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to access restricted endpoints...

CVE-2021-1612: UNIX Symbolic Link (Symlink) Following

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system. This vulnerability is due to improper access controls on files within the local file system. An attacker could exploit this vulnerability by placi...

CVE-2021-41428: Undefined Security Weakness

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-20435: Improper Certificate Validation

IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 196355...

CVE-2021-34770: Heap-based Buffer Overflow

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to execute arbitrary code with administrative privileges or cause a...

CVE-2021-38863: Insufficiently Protected Credentials

IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154...

CVE-2020-19951: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...

CVE-2021-29814: Improper Neutralization of Input During Web Page Generation

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-3824: Improper Neutralization of Encoded URI Schemes in a Web Page

OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL...

CVE-2021-29832: Improper Neutralization of Input During Web Page Generation

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2020-19554: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...

CVE-2021-41084: Server-Side Request Forgery (SSRF)

http4s is an open source scala interface for HTTP. In affected versions http4s is vulnerable to response-splitting or request-splitting attacks when untrusted user input is used to create any of the following fields: Header names Header.nameå, Header values Header.value, Status reason phrases...

CVE-2021-29819: Improper Neutralization of Input During Web Page Generation

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-32276: NULL Pointer Dereference

An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function getsample located in output.c. It allows an attacker to cause Denial of Service...

CVE-2021-29807: Improper Neutralization of Input During Web Page Generation

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29817: Improper Neutralization of Input During Web Page Generation

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-25740: Unintended Proxy or Intermediary

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack...

CVE-2021-24596: Improper Neutralization of Input During Web Page Generation

The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users editors and admins to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24400: Improper Neutralization of Special Elements used in an SQL Command

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-32278: Out-of-bounds Write

An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. It allows an attacker to cause code Execution...

CVE-2021-24404: Improper Neutralization of Special Elements used in an SQL Command

The options.php file of the WP-Board WordPress plugin through 1.1 beta accepts a postid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is passed twice so ...

CVE-2021-24613: Improper Neutralization of Input During Web Page Generation

The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the frontend even when the unfilteredhtml capability is disallowed...

CVE-2021-39585: NULL Pointer Dereference

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traitsdump located in abc.c. It allows an attacker to cause Denial of Service...

CVE-2021-39559: NULL Pointer Dereference

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function GString::GString located in GString.cc. It allows an attacker to cause Denial of Service...

CVE-2021-24530: Improper Neutralization of Input During Web Page Generation

The Alojapro Widget WordPress plugin through 1.1.15 doesn't properly sanitise its Custom CSS settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-39561: Out-of-bounds Write

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function Gfx::opSetFillColorN located in Gfx.cc. It allows an attacker to cause code Execution...

CVE-2020-21468: Undefined Security Weakness

A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service DOS. NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7...

CVE-2021-39218: Free of Memory not on the Heap

Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulnerability. There was an invalid free and out-of-bounds read and write bug when running Wasm that uses externrefs in Wasmtime. To trigger thi...

CVE-2021-41380: Improper Input Validation

RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service application crash via crafted RFB protocol data. NOTE: It is asserted that this issue requires social engineering a user into connecting to a fake VNC Server. The VNC Viewer application they are using will then hang,...

CVE-2021-31844: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in McAfee Data Loss Prevention DLP Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated privileges through placing carefully constructed Ami Pro .sam files onto the local system and triggering a DLP Endpoint scan...

CVE-2021-38406: Out-of-bounds Write

Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process...

CVE-2020-14130: Exposure of Resource to Wrong Sphere

Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version 3.0.210809...

CVE-2020-21595: Out-of-bounds Write

libde265 v1.0.4 contains a heap buffer overflow in the mcluma function, which can be exploited via a crafted a file...

CVE-2020-21597: Out-of-bounds Write

libde265 v1.0.4 contains a heap buffer overflow in the mcchroma function, which can be exploited via a crafted a file...

CVE-2021-29842: Improper Restriction of Excessive Authentication Attempts

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202...

CVE-2020-21532: Buffer Copy without Checking Size of Input

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c...

CVE-2020-21605: Undefined Security Weakness

libde265 v1.0.4 contains a segmentation fault in the applysaointernal function, which can be exploited via a crafted a file...

CVE-2021-40670: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file...

CVE-2021-38669: Undefined Security Weakness

Microsoft Edge Chromium-based Tampering Vulnerability...

CVE-2021-36973: Improper Privilege Management

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability...

CVE-2020-21322: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2021-38626: Improper Privilege Management

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2021-38629: Undefined Security Weakness

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability...

CVE-2020-19156: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Ari Adminer v1 allows remote attackers to execute arbitrary code via the 'Title' parameter of the 'Add New Connections' component when the 'save' function is called...

CVE-2020-19155: Exposure of Resource to Wrong Sphere

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the 'FileManager.rename' function in the component 'modules/filemanager/FileManagerController.java'...

CVE-2021-39189: Observable Response Discrepancy

Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually...