Day: September 17, 2021

CMS Made Simple 2.2.8 CGExtensions Module action.setdefaulttemplate.php m1_filename path traversal

A vulnerability was found in CMS Made Simple 2.2.8 (Content Management System). It has been rated as critical. This issue

Common Vulnerabilities and Exposures

McAfee Data Loss Prevention prior 11.6.100 Ami Pro File buffer overflow

A vulnerability classified as critical has been found in McAfee Data Loss Prevention (Data Loss Prevention Software). Affected is an

Common Vulnerabilities and Exposures

ZRender up to 5.2.0 src/core/util.ts merge/clone code injection

A vulnerability classified as critical was found in ZRender up to 5.2.0. Affected by this vulnerability is the function merge/clone

Common Vulnerabilities and Exposures

AcuityBrands NECY System Controller prior 1.17.21245.754 hard-coded key

A vulnerability, which was classified as problematic, has been found in AcuityBrands NECY System Controller. Affected by this issue is

Common Vulnerabilities and Exposures

Device42 Main Appliance up to 17.05.00 Nmap Discovery Utility argument injection

A vulnerability, which was classified as critical, was found in Device42 Main Appliance up to 17.05.00. This affects an unknown

Common Vulnerabilities and Exposures

Device42 Remote Collector up to 17.05.00 SNMP Connectivity Utility os command injection

A vulnerability has been found in Device42 Remote Collector up to 17.05.00 and classified as critical. This vulnerability affects an

Common Vulnerabilities and Exposures

McAfee Endpoint Security up to 10.7.0 privileges management [CVE-2021-31843]

A vulnerability was found in McAfee Endpoint Security up to 10.7.0 and classified as critical. This issue affects some unknown

Common Vulnerabilities and Exposures

McAfee Data Loss Prevention prior 11.6.200 on Windows Ami Pro File buffer overflow

A vulnerability was found in McAfee Data Loss Prevention on Windows (Data Loss Prevention Software). It has been classified as

Common Vulnerabilities and Exposures

XSS Hunter Express Path improper authentication [CVE-2021-41317]

A vulnerability was found in XSS Hunter Express (affected version unknown). It has been declared as critical. Affected by this

Common Vulnerabilities and Exposures

McAfee Endpoint Security up to 10.7.0 on Windows xml external entity reference

A vulnerability was found in McAfee Endpoint Security up to 10.7.0 on Windows. It has been rated as problematic. Affected

Common Vulnerabilities and Exposures

National Instruments NI-PAL Driver up to 20.0.0 input validation

A vulnerability classified as critical has been found in National Instruments NI-PAL Driver up to 20.0.0 (Hardware Driver Software). This

Common Vulnerabilities and Exposures

Tremor up to 0.11.5 patch/merge/state use after free

A vulnerability classified as critical was found in Tremor up to 0.11.5. This vulnerability affects the function patch/merge/state. Upgrading to

Common Vulnerabilities and Exposures

BulletProof Security Plugin up to 5.1 on WordPress Database Backup ~/db_backup_log.txt information disclosure

A vulnerability was found in BulletProof Security Plugin up to 5.1 on WordPress (WordPress Plugin). It has been classified as

Common Vulnerabilities and Exposures

cookiex-deep code injection [CVE-2021-23442]

A vulnerability was found in cookiex-deep (the affected version is unknown). It has been declared as critical. This vulnerability affects

Common Vulnerabilities and Exposures

List Item Change Plug-In up to 1.1 on EC-CUBE cross site scripting

A vulnerability was found in List Item Change Plug-In up to 1.1 on EC-CUBE. It has been declared as problematic.

Common Vulnerabilities and Exposures

Order Status Batch Change Plug-In on EC-CUBE cross site scripting

A vulnerability was found in Order Status Batch Change Plug-In on EC-CUBE (unknown version). It has been rated as problematic.

Common Vulnerabilities and Exposures

RevoWorks Browser up to 2.1.230 Privilege Escalation [CVE-2021-20790]

A vulnerability classified as problematic has been found in RevoWorks Browser up to 2.1.230. There is no information about possible

Common Vulnerabilities and Exposures

RevoWorks Browser up to 2.1.230 access control [CVE-2021-20791]

A vulnerability classified as critical was found in RevoWorks Browser up to 2.1.230. Affected by this vulnerability is an unknown

Common Vulnerabilities and Exposures

Apache Shiro up to 1.7.x Spring Boot improper authentication

A vulnerability, which was classified as critical, has been found in Apache Shiro up to 1.7.x. Affected by this issue

Common Vulnerabilities and Exposures

Qualcomm Snapdragon Compute Kernel Graphics Driver use after free

A vulnerability, which was classified as critical, was found in Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile,

Common Vulnerabilities and Exposures

Qualcomm Snapdragon Auto Preemption null pointer dereference

A vulnerability has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and

Common Vulnerabilities and Exposures

Qualcomm Snapdragon Auto PD Request Frame use after free [CVE-2021-1976]

A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice

Common Vulnerabilities and Exposures

Qualcomm Snapdragon Auto Configuration Command integer overflow

A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon

Common Vulnerabilities and Exposures

Qualcomm Snapdragon Auto Beacon Template Update Command heap-based overflow

A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice