Day: August 28, 2021

Cachet up to 2.5.0 injection [CVE-2021-39174]

A vulnerability, which was classified as critical, was found in Cachet up to 2.5.0. Affected is an unknown part. Upgrading

Common Vulnerabilities and Exposures

Xen Grant Table handler iteration [CVE-2021-28698]

A vulnerability was found in Xen (Virtualization Software) (affected version unknown). It has been declared as problematic. Affected by this

Common Vulnerabilities and Exposures

cxuucms 3.1 public/admin.php pid sql injection

A vulnerability was found in cxuucms 3.1. It has been rated as critical. Affected by this issue is some unknown

Common Vulnerabilities and Exposures

Cacti 1.2.12 reports_admin.php cross site scripting

A vulnerability classified as problematic has been found in Cacti 1.2.12 (Log Management Software). This affects an unknown part of

Common Vulnerabilities and Exposures

Xen Grant Table v2 Status Page allocation of resources [CVE-2021-28697]

A vulnerability classified as problematic was found in Xen (Virtualization Software) (the affected version is unknown). This vulnerability affects an

Common Vulnerabilities and Exposures

Xen dom0less resource consumption [CVE-2021-28700]

A vulnerability, which was classified as problematic, has been found in Xen (Virtualization Software) (unknown version). This issue affects an

Common Vulnerabilities and Exposures

Xen IOMMU Page Mapping access control [CVE-2021-28694]

A vulnerability, which was classified as critical, was found in Xen (Virtualization Software) (version unknown). Affected is some unknown processing

Common Vulnerabilities and Exposures

Xen IOMMU Page Mapping access control [CVE-2021-28695]

A vulnerability has been found in Xen (Virtualization Software) (affected version unknown) and classified as critical. Affected by this vulnerability

Common Vulnerabilities and Exposures

Xen IOMMU Page Mapping access control [CVE-2021-28696]

A vulnerability was found in Xen (Virtualization Software) (affected version not known) and classified as critical. Affected by this issue

Common Vulnerabilities and Exposures

Xen grant-v2 Status Frame resource consumption [CVE-2021-28699]

A vulnerability was found in Xen (Virtualization Software) (the affected version unknown). It has been classified as problematic. This affects

Common Vulnerabilities and Exposures

Microsoft Passport-SAML up to 3.0.x SAML Transform resource consumption

A vulnerability was found in Microsoft Passport-SAML up to 3.0.x. It has been declared as problematic. This vulnerability affects an

Common Vulnerabilities and Exposures

Cachet up to 2.5.0 Configuration Edition crlf injection

A vulnerability was found in Cachet up to 2.5.0. It has been rated as critical. This issue affects an unknown

Common Vulnerabilities and Exposures

Cachet up to 2.5.0 ReadyForUse type conversion

A vulnerability classified as critical has been found in Cachet up to 2.5.0. Affected is an unknown code block of

Common Vulnerabilities and Exposures

Blog_mini 1.0 /admin/submit-articles cross site scripting

A vulnerability classified as problematic was found in Blog_mini 1.0. Affected by this vulnerability is some unknown processing of the

Common Vulnerabilities and Exposures

Simiki up to 1.6.2.1 config.py command injection

A vulnerability, which was classified as critical, has been found in Simiki up to 1.6.2.1. Affected by this issue is

Common Vulnerabilities and Exposures

WMS 1.0 GET Parameter id sql injection

A vulnerability, which was classified as critical, was found in WMS 1.0 (Warehouse Management System Software). This affects an unknown

Common Vulnerabilities and Exposures

Blog_mini 1.0 add cross site scripting

A vulnerability has been found in Blog_mini 1.0 and classified as problematic. This vulnerability affects some unknown functionality of the

Common Vulnerabilities and Exposures

Simiki up to 1.6.2.1 generators.py cross site scripting

A vulnerability was found in Simiki up to 1.6.2.1 and classified as problematic. This issue affects an unknown part of

Common Vulnerabilities and Exposures

Mezzanine 4.3.1 admin/blog/blogpost/add/ Description cross site scripting

A vulnerability was found in Mezzanine 4.3.1. It has been classified as problematic. Affected is an unknown code of the

Common Vulnerabilities and Exposures

ok-file-formats 1 ok_jpg.c ok_jpg_generate_huffman_table heap-based overflow

A vulnerability was found in ok-file-formats 1. It has been declared as critical. Affected by this vulnerability is the function

Common Vulnerabilities and Exposures

Magento up to 19.4.14/20.0.10 Layout XML xml injection

A vulnerability was found in Magento up to 19.4.14/20.0.10. It has been rated as critical. Affected by this issue is

Common Vulnerabilities and Exposures

Magento up to 19.4.14/20.0.12 unrestricted upload [CVE-2021-32759]

A vulnerability classified as critical has been found in Magento up to 19.4.14/20.0.12. This affects an unknown function. Upgrading to

Common Vulnerabilities and Exposures

DeDeCMS 5.7SP2 /uploads/dede unrestricted upload

A vulnerability classified as critical was found in DeDeCMS 5.7SP2 (Content Management System). This vulnerability affects an unknown functionality of

Common Vulnerabilities and Exposures

YouDianCMS 8.0 Search sql injection

A vulnerability, which was classified as critical, has been found in YouDianCMS 8.0. This issue affects some unknown functionality of