Day: August 17, 2021

Django-Widgy 0.8.4 Change Widgy Page unrestricted upload

A vulnerability was found in Django-Widgy 0.8.4 (Content Management System). It has been rated as critical. Affected by this issue

Common Vulnerabilities and Exposures

Citrix ShareFile Storage Zones Controller Mitigation Tool missing encryption

A vulnerability classified as problematic has been found in Citrix ShareFile Storage Zones Controller (Connectivity Software) (the affected version unknown).

Common Vulnerabilities and Exposures

hbs Package on npm Engine Configuration file information disclosure

A vulnerability classified as problematic was found in hbs Package on npm (NPM Package) (the affected version is unknown). This

Common Vulnerabilities and Exposures

Dell EMC PowerScale OneFS up to 9.1.0.x GET Request information disclosure

A vulnerability, which was classified as problematic, has been found in Dell EMC PowerScale OneFS up to 9.1.0.x. This issue

Common Vulnerabilities and Exposures

Dell EMC PowerScale OneFS up to 9.2.x permission assignment [CVE-2021-36279]

A vulnerability, which was classified as critical, was found in Dell EMC PowerScale OneFS up to 9.2.x. Affected is some

Common Vulnerabilities and Exposures

Dell EMC PowerScale OneFS up to 9.2.x permission assignment [CVE-2021-36280]

A vulnerability has been found in Dell EMC PowerScale OneFS up to 9.2.x and classified as critical. Affected by this

Common Vulnerabilities and Exposures

Lin-CMS-Flask 0.1.1 Authentication Token session fixiation

A vulnerability was found in Lin-CMS-Flask 0.1.1 (Content Management System) and classified as critical. Affected by this issue is an

Common Vulnerabilities and Exposures

Quokka 0.4.0 quokka/utils/atom.py xml external entity reference

A vulnerability was found in Quokka 0.4.0. It has been classified as critical. This affects an unknown code block of

Common Vulnerabilities and Exposures

Quokka 0.4.0 views.py xml external entity reference

A vulnerability was found in Quokka 0.4.0. It has been declared as critical. This vulnerability affects some unknown processing of

Common Vulnerabilities and Exposures

MockServer injection [CVE-2021-32827]

A vulnerability was found in MockServer (unknown version). It has been rated as critical. This issue affects an unknown function.

Common Vulnerabilities and Exposures

Shopware up to 6.4.3.0 Mail Agent String command injection

A vulnerability classified as critical has been found in Shopware up to 6.4.3.0. Affected is an unknown functionality of the

Common Vulnerabilities and Exposures

Shopware up to 6.4.3.0 Import/Export resource injection

A vulnerability classified as critical was found in Shopware up to 6.4.3.0. Affected by this vulnerability is some unknown functionality

Common Vulnerabilities and Exposures

Quokka 0.4.0 quokka/admin/actions.py Username cross site scripting

A vulnerability, which was classified as problematic, has been found in Quokka 0.4.0. Affected by this issue is an unknown

Common Vulnerabilities and Exposures

Pulse Secure Pulse Connect Secure up to 9.1R11 Web Request path traversal

A vulnerability, which was classified as problematic, was found in Pulse Secure Pulse Connect Secure up to 9.1R11. This affects

Common Vulnerabilities and Exposures

Pulse Secure Pulse Connect Secure up to 9.1R11 Web Request buffer overflow

A vulnerability has been found in Pulse Secure Pulse Connect Secure up to 9.1R11 and classified as critical. This vulnerability

Common Vulnerabilities and Exposures

Pulse Secure Pulse Connect Secure up to 9.1R11 Web Parameter command injection

A vulnerability was found in Pulse Secure Pulse Connect Secure up to 9.1R11 and classified as critical. This issue affects

Common Vulnerabilities and Exposures

Pulse Secure Pulse Connect Secure up to 9.1R11 Web Parameter cross site scripting

A vulnerability was found in Pulse Secure Pulse Connect Secure up to 9.1R11. It has been classified as problematic. Affected

Common Vulnerabilities and Exposures

Pulse Secure Pulse Connect Secure up to 9.1R11 Administrator Web Interface unrestricted upload

A vulnerability was found in Pulse Secure Pulse Connect Secure up to 9.1R11. It has been declared as critical. Affected

Common Vulnerabilities and Exposures

Pulse Secure Pulse Connect Secure up to 9.1R11 Administrator Web Console command injection

A vulnerability was found in Pulse Secure Pulse Connect Secure up to 9.1R11. It has been rated as critical. Affected

Common Vulnerabilities and Exposures

Node.js https API rejectUnauthorized certificate validation

A vulnerability classified as critical has been found in Node.js (JavaScript Library) (the affected version unknown). This affects an unknown

Common Vulnerabilities and Exposures

Node.js up to 12.22.4/14.17.4/16.6.0 use after free [CVE-2021-22940]

A vulnerability classified as critical was found in Node.js up to 12.22.4/14.17.4/16.6.0 (JavaScript Library). This vulnerability affects an unknown code.

Common Vulnerabilities and Exposures

Dell EMC PowerScale OneFS up to 9.2.x Log denial of service

A vulnerability, which was classified as problematic, has been found in Dell EMC PowerScale OneFS up to 9.2.x. This issue

Common Vulnerabilities and Exposures

Dell EMC PowerScale OneFS up to 9.1.1.x Smartlock WORM Compliance Mode command injection

A vulnerability, which was classified as problematic, was found in Dell EMC PowerScale OneFS up to 9.1.1.x. Affected is some

Common Vulnerabilities and Exposures

Dell EMC PowerScale OneFS up to 9.2.1.x Smartlock WORM Compliance Mode os command injection

A vulnerability has been found in Dell EMC PowerScale OneFS up to 9.2.1.x and classified as critical. Affected by this