by Kastro CVE-2021-43779 · pluginsGLPI addressing
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 683 of 786
pluginsGLPI
mitre
CVE-2021-45955 · mitre
Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a…
CVE-2021-43711 · mitre
The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET param…
CVE-2021-45427 · mitre
Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal.
CVE-2021-45428 · mitre
TLR-2005KSH is affected by an incorrect access control vulnerability.
CVE-2021-45814 · mitre
Nettmp NNT 5.1 is affected by a SQL injection vulnerability.
CVE-2021-45951 · mitre
Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard).
CVE-2021-45952 · mitre
Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp).
CVE-2021-45953 · mitre
Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c).
CVE-2021-45954 · mitre
Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth).
CVE-2021-45957 · mitre
Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c).
CVE-2021-41842 · mitre
An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46,…
CVE-2020-20944 · mitre
An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files.
CVE-2021-37400 · mitre
An attacker may obtain the user credentials from the communication between the PLC and the software.
CVE-2021-37401 · mitre
An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards.
CVE-2020-21237 · mitre
An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks.
CVE-2021-45389 · mitre
A flaw was found with the JWT token.
CVE-2020-21238 · mitre
An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks.
CVE-2020-22057 · mitre
The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the defa…
mruby
codeigniter4
CVE-2022-21647 · codeigniter4 CodeIgniter4
Deserialization of Untrusted Data in Codeigniter4
tenable
CVE-2021-20158 · tenable
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability.
CVE-2021-20151 · tenable
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device.
CVE-2021-20155 · tenable
Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials.
CVE-2021-20149 · tenable
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface.
Qualcomm, Inc.
CVE-2021-30351 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon A…
CVE-2021-30275 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Sna…
CVE-2021-30276 · Qualcomm, Inc. Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wired Infrastructure and Networking
Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon C…
thekelleys
Apache Software Foundation
CVE-2021-40525 · Apache Software Foundation Apache James
Sieve file storage vulnerable to path traversal attacks
Aaron-Junker
CVE-2022-21643 · Aaron-Junker USOC
SQL Injection in USOC
CVE-2022-21644 · Aaron-Junker USOC
SQL Injection via search in USOC
QNAP Systems Inc.
CVE-2021-38687 · QNAP Systems Inc. Surveillance Station
Stack Overflow Vulnerability in Surveillance Station
Huawei
CVE-2021-39979 · Huawei HarmonyOS
HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.
CVE-2021-37120 · huawei
There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege es…
CVE-2021-37128 · Huawei HarmonyOS
HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.
CVE-2021-37121 · huawei
There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.
CVE-2021-39990 · Huawei HarmonyOS
The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user expe…
CVE-2021-37116 · Huawei HarmonyOS
PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN o…
CVE-2021-39982 · Huawei HarmonyOS
Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and wr…
transloadit
CVE-2022-0086 · transloadit transloadit/uppy
Server-Side Request Forgery (SSRF) in transloadit/uppy
WOWSOFT
4NB
Zyxel
SUN & MOON RISE CO., LTD.
CVE-2021-45917 · SUN & MOON RISE CO., LTD. Shockwall