Day: June 25, 2021

Catfish CMS 4.9.90 Parameter announcement_gonggao cross site scripting

A vulnerability was found in Catfish CMS 4.9.90 (Content Management System). It has been rated as problematic. This issue affects

Common Vulnerabilities and Exposures

OpenEMR up to 6.0.0.1 weak password [CVE-2021-25923]

A vulnerability classified as problematic has been found in OpenEMR up to 6.0.0.1 (Business Process Management Software). Affected is some

Common Vulnerabilities and Exposures

QNAP QTS/QuTS Hero/QuTScloud os command injection [CVE-2021-28800]

A vulnerability classified as critical was found in QNAP QTS, QuTS Hero and QuTScloud (Network Attached Storage Software) (affected version

Common Vulnerabilities and Exposures

HelpU Remote Control buffer overflow [CVE-2020-7862]

A vulnerability, which was classified as critical, has been found in HelpU Remote Control (Remote Access Software) (affected version not

Common Vulnerabilities and Exposures

Avaya Aura Appliance Virtualization Platform Utilities up to 8.1.3.1 File Management information disclosure

A vulnerability, which was classified as problematic, was found in Avaya Aura Appliance Virtualization Platform Utilities up to 8.1.3.1 (Virtualization

Common Vulnerabilities and Exposures

Avaya Aura Appliance Virtualization Platform Utilities up to 8.1.3.1 unnecessary privileges

A vulnerability has been found in Avaya Aura Appliance Virtualization Platform Utilities up to 8.1.3.1 (Virtualization Software) and classified as

Common Vulnerabilities and Exposures

Avaya Aura Experience Portal up to 7.0/7.2.3/8.0.0 Web Management cross site scripting

A vulnerability was found in Avaya Aura Experience Portal up to 7.0/7.2.3/8.0.0 and classified as problematic. This issue affects an

Common Vulnerabilities and Exposures

Avaya Aura Utility Services 7.x File Management information disclosure

A vulnerability was found in Avaya Aura Utility Services 7.x. It has been classified as problematic. Affected is an unknown

Common Vulnerabilities and Exposures

Avaya Aura Utility Services 7.x unnecessary privileges [CVE-2021-25650]

A vulnerability was found in Avaya Aura Utility Services 7.x. It has been declared as critical. Affected by this vulnerability

Common Vulnerabilities and Exposures

Avaya Aura Utility Services 7.x unnecessary privileges [CVE-2021-25651]

A vulnerability was found in Avaya Aura Utility Services 7.x. It has been rated as critical. Affected by this issue

Common Vulnerabilities and Exposures

Avaya Aura Experience Portal up to 7.2.3/8.0.0 System Service Menu redirect

A vulnerability classified as problematic has been found in Avaya Aura Experience Portal up to 7.2.3/8.0.0. This affects an unknown

Common Vulnerabilities and Exposures

ZTE ZXV10 B860H V83011303.0010/V83011303.0016 access control

A vulnerability classified as critical was found in ZTE ZXV10 B860H V83011303.0010/V83011303.0016. This vulnerability affects some unknown functionality. There is

Common Vulnerabilities and Exposures

Mozilla Firefox/Firefox ESR/Thunderbird memory corruption [CVE-2021-29967]

A vulnerability, which was classified as critical, has been found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (unknown

Common Vulnerabilities and Exposures

GNUBOARD5 up to 5.3.2.8 install_db.php table_prefix sql injection

A vulnerability, which was classified as critical, was found in GNUBOARD5 up to 5.3.2.8 (Forum Software). Affected is an unknown

Common Vulnerabilities and Exposures

GNUBOARD5 up to 5.3.2.8 bbs/login.php url cross site scripting

A vulnerability has been found in GNUBOARD5 up to 5.3.2.8 (Forum Software) and classified as problematic. Affected by this vulnerability

Common Vulnerabilities and Exposures

GNUBOARD5 up to 5.3.2.8 Parameter bbs/move_update.php act cross site scripting

A vulnerability was found in GNUBOARD5 up to 5.3.2.8 (Forum Software) and classified as problematic. Affected by this issue is

Common Vulnerabilities and Exposures

Mozilla Firefox up to 87.x memory corruption [CVE-2021-29947]

A vulnerability was found in Mozilla Firefox up to 87.x (Web Browser). It has been classified as critical. This affects

Common Vulnerabilities and Exposures

Mozilla Firefox up to 87.x memory corruption [CVE-2021-29966]

A vulnerability was found in Mozilla Firefox up to 87.x (Web Browser). It has been declared as critical. This vulnerability

Common Vulnerabilities and Exposures

Flysystem up to 1.1.3/2.1.0 on PHP Whitespace toctou

A vulnerability was found in Flysystem up to 1.1.3/2.1.0 on PHP. It has been rated as critical. This issue affects

Common Vulnerabilities and Exposures

IBOS 4.5.4 CronController.php getshell file inclusion

A vulnerability classified as critical has been found in IBOS 4.5.4. Affected is the function getshell of the file /system/modules/dashboard/controllers/CronController.php.

Common Vulnerabilities and Exposures

ZhongBangKeJi CRMEB 3.1.0+ UploadService.php Getshell unrestricted upload

A vulnerability classified as critical was found in ZhongBangKeJi CRMEB 3.1.0+. Affected by this vulnerability is the function Getshell of

Common Vulnerabilities and Exposures

Linux Kernel up to 5.8.9 Software Scrollback vgacon_scrolldelta out-of-bounds read

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.8.9 (Operating System). Affected by

Common Vulnerabilities and Exposures

phpwcms 1.9.13 /phpwcms/setup/setup.php code injection

A vulnerability, which was classified as critical, was found in phpwcms 1.9.13. This affects some unknown processing of the file

Common Vulnerabilities and Exposures

ZhongBangKeJi CRMEB 3.1.0+ Domain Name Filter CopyTaobao.php server-side request forgery

A vulnerability has been found in ZhongBangKeJi CRMEB 3.1.0+ and classified as critical. This vulnerability affects an unknown function of