Day: August 30, 2021

Simply Gallery Blocks with Lightbox up to 2.2.0 Meta Data cross site scripting

A vulnerability was found in Simply Gallery Blocks with Lightbox up to 2.2.0 (Photo Gallery Software). It has been classified

Common Vulnerabilities and Exposures

Atlassian JIRA Server/Data Center up to 8.17.x AssociateFieldToScreens Page name cross site scripting

A vulnerability was found in Atlassian JIRA Server and Data Center up to 8.17.x (Bug Tracking Software). It has been

Common Vulnerabilities and Exposures

BenQ Smart Wireless Conference Projector Management Interface privileges management

A vulnerability was found in BenQ Smart Wireless Conference Projector (Project Management Software) (unknown version). It has been rated as

Common Vulnerabilities and Exposures

Atlassian JIRA Server/Data Center up to 8.5.17/8.13.9/8.18.1 Editor Plugin cross site scripting

A vulnerability classified as problematic has been found in Atlassian JIRA Server and Data Center up to 8.5.17/8.13.9/8.18.1 (Bug Tracking

Common Vulnerabilities and Exposures

Zoho ManageEngine Log360 up to 5218 Proxy Settings cross-site request forgery

A vulnerability classified as problematic was found in Zoho ManageEngine Log360 up to 5218. Affected by this vulnerability is an

Common Vulnerabilities and Exposures

Zoho ManageEngine Cloud Security Plus up to 4116 Proxy Settings cross-site request forgery

A vulnerability, which was classified as problematic, has been found in Zoho ManageEngine Cloud Security Plus up to 4116 (Cloud

Common Vulnerabilities and Exposures

Zoho ManageEngine Log360 up to 5223 Logon Security Settings cross-site request forgery

A vulnerability, which was classified as problematic, was found in Zoho ManageEngine Log360 up to 5223. This affects some unknown

Common Vulnerabilities and Exposures

Zoho ManageEngine Log360 up to 5224 cross site scripting [CVE-2021-40176]

A vulnerability has been found in Zoho ManageEngine Log360 up to 5224 and classified as problematic. This vulnerability affects an

Common Vulnerabilities and Exposures

Zoho ManageEngine Log360 up to 5223 Logon Settings LOGO_PATH cross site scripting

A vulnerability was found in Zoho ManageEngine Log360 up to 5223 and classified as problematic. This issue affects an unknown

Common Vulnerabilities and Exposures

Favicon by RealFaviconGenerator Plugin up to 1.3.20 on WordPress its cross site scripting

A vulnerability was found in Favicon by RealFaviconGenerator Plugin up to 1.3.20 on WordPress (WordPress Plugin) and classified as problematic.

Common Vulnerabilities and Exposures

FluentSMTP Plugin up to 2.0.0 on WordPress SMTP Settings cross site scripting

A vulnerability was found in FluentSMTP Plugin up to 2.0.0 on WordPress (WordPress Plugin). It has been classified as problematic.

Common Vulnerabilities and Exposures

Apache OFBiz up to 17.12.07 Exception information exposure

A vulnerability was found in Apache OFBiz up to 17.12.07. It has been declared as critical. Affected by this vulnerability

Common Vulnerabilities and Exposures

Zoho ManageEngine Log360 up to 5218 unrestricted upload [CVE-2021-40175]

A vulnerability was found in Zoho ManageEngine Log360 up to 5218. It has been rated as critical. Affected by this

Common Vulnerabilities and Exposures

Zoho ManageEngine Log360 up to 5224 BCP File Privilege Escalation

A vulnerability classified as critical has been found in Zoho ManageEngine Log360 up to 5224. This affects an unknown code

Common Vulnerabilities and Exposures

Victure PC420 Smart Camera up to 1.2.2 ONVIF Server stack-based overflow

A vulnerability classified as very critical was found in Victure PC420 Smart Camera up to 1.2.2. This vulnerability affects an

Common Vulnerabilities and Exposures

Hexagon GeoMedia WebMap up to 2020 Update 1 MapService.svc GetMap Id/sourceItems sql injection

A vulnerability, which was classified as critical, has been found in Hexagon GeoMedia WebMap up to 2020 Update 1. This

Common Vulnerabilities and Exposures

Tor up to 0.3.5.15/0.4.5.9/0.4.6.6 signature verification [CVE-2021-38385]

A vulnerability, which was classified as critical, was found in Tor up to 0.3.5.15/0.4.5.9/0.4.6.6 (Network Encryption Software). Affected is an

Common Vulnerabilities and Exposures

Atlassian JIRA Server/Data Center up to 8.13.8/8.17.x Cache access control

A vulnerability has been found in Atlassian JIRA Server and Data Center up to 8.13.8/8.17.x (Bug Tracking Software) and classified

Common Vulnerabilities and Exposures

Fetchmail up to 6.4.21 STARTTLS Encryption cleartext transmission

A vulnerability was found in Fetchmail up to 6.4.21 and classified as problematic. Affected by this issue is some unknown

Common Vulnerabilities and Exposures

Bold Page Builder Plugin up to 3.1.5 on WordPress AJAX Action bt_bb_get_grid deserialization

A vulnerability was found in Bold Page Builder Plugin up to 3.1.5 on WordPress (WordPress Plugin) and classified as critical.

Common Vulnerabilities and Exposures

OrbiTeam BSCW Classic up to 5.0.11/5.1.9/5.2.3/7.3.2/7.4.2 XML Tag paraparser.py exportpdf xml injection

A vulnerability was found in OrbiTeam BSCW Classic up to 5.0.11/5.1.9/5.2.3/7.3.2/7.4.2. It has been classified as critical. This affects the

Common Vulnerabilities and Exposures

OrbiTeam BSCW Classic up to 5.0.11/5.1.9/5.2.3/7.3.2/7.4.2 Archive Extraction code injection

A vulnerability was found in OrbiTeam BSCW Classic up to 5.0.11/5.1.9/5.2.3/7.3.2/7.4.2. It has been declared as critical. This vulnerability affects

Common Vulnerabilities and Exposures

ShareThis Dashboard for Google Analytics Plugin up to 2.5.1 on WordPress Status View ga_action cross site scripting

A vulnerability was found in ShareThis Dashboard for Google Analytics Plugin up to 2.5.1 on WordPress (WordPress Plugin). It has

Common Vulnerabilities and Exposures

Side Menu Lite Plugin up to 2.2.5 on WordPress List Page sql injection

A vulnerability classified as critical has been found in Side Menu Lite Plugin up to 2.2.5 on WordPress (WordPress Plugin).