by Kastro CVE-2021-42237 · Sitecore XP
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 694 of 786
Sitecore
mitre
CVE-2021-42667 · mitre
A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views.
CVE-2021-42669 · mitre
A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which allows changing the…
CVE-2020-25367 · mitre
A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05.
CVE-2020-25368 · mitre
A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05.
CVE-2021-34684 · mitre
Hitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute arbitrary SQL queries on any Pentaho dat…
CVE-2021-42665 · mitre
An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can…
CVE-2021-42668 · mitre
A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web p…
CVE-2021-42670 · mitre
A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcements_student.p…
CVE-2021-43140 · mitre
SQL Injection vulnerability exists in Sourcecodester.
CVE-2021-35368 · mitre
OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a…
CVE-2021-42077 · mitre
PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.php username parameter.
CVE-2020-23679 · mitre
Buffer overflow vulnerability in Renleilei1992 Linux_Network_Project 1.0, allows attackers to execute arbitrary code, via the password fi…
CVE-2021-41492 · mitre
Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System (POS) 1.0 via the (1) Product Code in the pos pag…
CVE-2021-42371 · mitre
lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.
CVE-2020-18261 · mitre
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.
CVE-2020-25366 · mitre
An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (Do…
CVE-2021-28023 · mitre
Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute…
CVE-2021-28024 · mitre
Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using…
CVE-2021-42772 · mitre
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management…
CVE-2020-22223 · mitre
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.
CVE-2020-22225 · mitre
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.
CVE-2020-22226 · mitre
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.
CVE-2021-30132 · mitre
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.
CVE-2021-42837 · mitre
An issue was discovered in Talend Data Catalog before 7.3-20210930.
CVE-2021-43400 · mitre
An issue was discovered in gatt-database.c in BlueZ 5.61.
CVE-2020-18262 · mitre
ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter.
Cisco
CVE-2021-40113 · Cisco Cisco Catalyst PON Series
Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities
CVE-2021-34795 · Cisco Cisco Catalyst PON Series
Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities
CVE-2021-40119 · Cisco Cisco Policy Suite (CPS) Software
Cisco Policy Suite Static SSH Keys Vulnerability
CVE-2021-40112 · Cisco Cisco Catalyst PON Series
Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities
Unknown
CVE-2021-24731 · Unknown Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes
Pie Register < 3.7.1.6 - Unauthenticated SQL Injection
CVE-2021-24693 · Unknown Simple Download Monitor
Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
snyk
Jenkins project
CVE-2021-21690 · Jenkins project Jenkins
Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 a…
CVE-2021-21691 · Jenkins project Jenkins
Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins 2.318 and earlier, LTS…
CVE-2021-21692 · Jenkins project Jenkins
FilePath#renameTo and FilePath#moveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read' agent-to-control…
CVE-2021-21696 · Jenkins project Jenkins
Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not limit agent read/write access to the libs/ directory inside build directories…
CVE-2021-21693 · Jenkins project Jenkins
When creating temporary files, agent-to-controller access to create those files is only checked after they've been created in Jenkins 2.3…
CVE-2021-21694 · Jenkins project Jenkins
FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions…
CVE-2021-21697 · Jenkins project Jenkins
Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenki…
CVE-2021-21685 · Jenkins project Jenkins
Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create parent directories in FilePath#mkd…
CVE-2021-21687 · Jenkins project Jenkins
Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create symbolic links when unarchiving a…
CVE-2021-21689 · Jenkins project Jenkins
FilePath#unzip and FilePath#untar were not subject to any agent-to-controller access control in Jenkins 2.318 and earlier, LTS 2.303.2 an…
legalweb
CVE-2021-42359 · legalweb WP DSGVO Tools (GDPR)