Day: August 27, 2021

IBM Maximo Asset Management 7.6.0/7.6.1 Web UI cross site scripting

A vulnerability, which was classified as problematic, has been found in IBM Maximo Asset Management 7.6.0/7.6.1 (Asset Management Software). Affected

Common Vulnerabilities and Exposures

object-path up to 0.11.5 currentPath type confusion

A vulnerability, which was classified as critical, was found in object-path up to 0.11.5. This affects an unknown code. Upgrading

Common Vulnerabilities and Exposures

ngiflib 0.4 NGIFLIB_NO_FILE Mode ngiflib.c GetByteStr heap-based overflow

A vulnerability has been found in ngiflib 0.4 and classified as critical. This vulnerability affects the function GetByteStr in the

Common Vulnerabilities and Exposures

ngiflib 0.4 NGIFLIB_NO_FILE Mode ngiflib.c GetByte heap-based overflow

A vulnerability was found in ngiflib 0.4 and classified as critical. This issue affects the function GetByte in the library

Common Vulnerabilities and Exposures

Phillip Lougher squashfs 4.5 unsquashfs unsquash-1.c squashfs_opendir pathname traversal

A vulnerability was found in Phillip Lougher squashfs 4.5. It has been classified as critical. Affected is the function squashfs_opendir

Common Vulnerabilities and Exposures

Misskey up to 12.50.x API Request Token cross site scripting

A vulnerability classified as problematic was found in Misskey up to 12.50.x. Affected by this vulnerability is some unknown functionality

Common Vulnerabilities and Exposures

Northern.tech Mender Enterprise up to 2.6.0/2.7.0 useradm Service session expiration

A vulnerability classified as problematic has been found in Northern.tech Mender Enterprise up to 2.6.0/2.7.0. Affected is an unknown functionality

Common Vulnerabilities and Exposures

OpenZepplin TimelockController privileges management

A vulnerability was found in OpenZepplin (the affected version is unknown). It has been declared as critical. This vulnerability affects

Common Vulnerabilities and Exposures

OPC Foundation Local Discovery Server prior 1.04.402.463 buffer overflow

A vulnerability was found in OPC Foundation Local Discovery Server. It has been rated as critical. This issue affects an

Common Vulnerabilities and Exposures

Atlassian Confluence Server/Confluence Data Center up to 6.13.22/7.4.10/7.11.5/7.12.4 Webwork OGNL injection

A vulnerability was found in Atlassian Confluence Server and Confluence Data Center up to 6.13.22/7.4.10/7.11.5/7.12.4 and classified as critical. Affected

Common Vulnerabilities and Exposures

Nuishop 2.3 sql injection [CVE-2020-20675]

A vulnerability has been found in Nuishop 2.3 and classified as critical. Affected by this vulnerability is an unknown part