Day: June 11, 2021

Qualcomm Snapdragon Wired Infrastructure and Networking TZ BSP information disclosure

A vulnerability classified as problematic was found in Qualcomm Snapdragon Wired Infrastructure and Networking (Chip Software) (affected version unknown). Affected

Common Vulnerabilities and Exposures

OpenEXR up to 3.0.0 integer overflow [CVE-2021-26945]

A vulnerability classified as problematic was found in OpenEXR up to 3.0.0. Affected by this vulnerability is some unknown functionality.

Common Vulnerabilities and Exposures

SilverStripe up to 4.6.0-rc1 GraphQL improper authentication

A vulnerability, which was classified as problematic, has been found in SilverStripe up to 4.6.0-rc1 (Content Management System). Affected by

Common Vulnerabilities and Exposures

SilverStripe up to 4.6.0-rc1 Form Field unknown vulnerability

A vulnerability, which was classified as critical, was found in SilverStripe up to 4.6.0-rc1 (Content Management System). This affects an

Common Vulnerabilities and Exposures

Apport prior 2.20.11-0ubuntu57 /proc/pid/status get_pid_info input validation

A vulnerability was found in Apport. It has been rated as critical. This issue affects the function get_pid_info of the

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition up to 7.10 oAuth Access Token information disclosure

A vulnerability has been found in GitLab Community Edition and Enterprise Edition up to 7.10 (Bug Tracking Software) and classified

Common Vulnerabilities and Exposures

GitLab 13.10 Blob Viewer cross site scripting

A vulnerability has been found in GitLab 13.10 (Bug Tracking Software) and classified as problematic. Affected by this vulnerability is

Common Vulnerabilities and Exposures

Nextcloud Client up to 3.16.0 on Android information disclosure

A vulnerability was found in Nextcloud Client up to 3.16.0 on Android (Android App Software) and classified as problematic. Affected

Common Vulnerabilities and Exposures

Intland codeBeamer ALM up to 10.1.SP4 WebDAV cross site scripting

A vulnerability was found in Intland codeBeamer ALM up to 10.1.SP4. It has been classified as problematic. This affects an

Common Vulnerabilities and Exposures

OpenEXR up to 3.0.0 copyIntoFrameBuffer heap-based overflow

A vulnerability was found in OpenEXR up to 3.0.0. It has been declared as critical. This vulnerability affects the function

Common Vulnerabilities and Exposures

OpenEXR up to 3.0.0 DwaCompressor integer overflow

A vulnerability classified as problematic has been found in OpenEXR up to 3.0.0. Affected is the function DwaCompressor. Upgrading to

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition up to 13.10.4/13.11.4/13.12.1 Merge Request resource consumption

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 13.10.4/13.11.4/13.12.1 (Bug Tracking Software). It has been

Common Vulnerabilities and Exposures

Django up to 2.2.23/3.1.11/3.2.3 pathname traversal [CVE-2021-33203]

A vulnerability was found in Django up to 2.2.23/3.1.11/3.2.3 (Content Management System). It has been declared as critical. Affected by

Common Vulnerabilities and Exposures

Siemens Mendix SAML Module up to 2.1.1 access control [CVE-2021-33712]

A vulnerability was found in Siemens Mendix SAML Module up to 2.1.1. It has been rated as critical. Affected by

Common Vulnerabilities and Exposures

codeBeamer ALM up to 10.1.SP4 cross-site request forgery [CVE-2020-26516]

A vulnerability classified as problematic has been found in codeBeamer ALM up to 10.1.SP4. This affects some unknown processing. There

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition 10.5 Webhook Hacker server-side request forgery

A vulnerability classified as critical was found in GitLab Community Edition and Enterprise Edition 10.5 (Bug Tracking Software). This vulnerability

Common Vulnerabilities and Exposures

Nuvoton NPCT75x 7.4.0.0 TPM access control

A vulnerability, which was classified as critical, has been found in Nuvoton NPCT75x 7.4.0.0. This issue affects an unknown functionality

Common Vulnerabilities and Exposures

Dell EMC NetWorker 18.x up to 19.4.0.1 log file [CVE-2021-21558]

A vulnerability, which was classified as problematic, was found in Dell EMC NetWorker 18.x up to 19.4.0.1. Affected is some

Common Vulnerabilities and Exposures

Squid Web Proxy up to 4.14/5.0.5 HTTP Range Request denial of service

A vulnerability was found in Squid Web Proxy up to 4.14/5.0.5 (Firewall Software). It has been rated as problematic. Affected

Common Vulnerabilities and Exposures

NTPsec 1.2.0 ntpkeygen inadequate encryption

A vulnerability classified as problematic has been found in NTPsec 1.2.0. This affects some unknown functionality of the component ntpkeygen.

Common Vulnerabilities and Exposures

Check Point SSL Network Extender on Linux Client information exposure

A vulnerability classified as problematic was found in Check Point SSL Network Extender on Linux (the affected version is unknown).

Common Vulnerabilities and Exposures

Polaris Office 9.103.83.44230 PDF File PolarisOffice.exe uninitialized pointer

A vulnerability, which was classified as critical, has been found in Polaris Office 9.103.83.44230. This issue affects an unknown code

Common Vulnerabilities and Exposures

Vembu BDR Suite up to 4.1.x GET Request command injection

A vulnerability has been found in Vembu BDR Suite up to 4.1.x and classified as critical. Affected by this vulnerability

Common Vulnerabilities and Exposures

reg-viz reg-suit up to 0.10.15 reg-keygen-git-hash-plugin code injection

A vulnerability was found in reg-viz reg-suit up to 0.10.15 and classified as critical. Affected by this issue is an