Day: September 21, 2021

IBM Jazz for Service Management/IBM Tivoli Netcool 1.1.3.10 XML Data xml external entity reference

A vulnerability was found in IBM Jazz for Service Management and IBM Tivoli Netcool 1.1.3.10 (Directory Service Software) and classified

Common Vulnerabilities and Exposures

IBM PowerVM Hypervisor FW950 Partition denial of service [CVE-2021-29795]

A vulnerability was found in IBM PowerVM Hypervisor FW860, PowerVM Hypervisor FW930, PowerVM Hypervisor FW940 and PowerVM Hypervisor FW950 (version

Common Vulnerabilities and Exposures

Google Android DumpstateDevice.cpp GetTimeStampAndPkt out-of-bounds write

A vulnerability was found in Google Android (Smartphone Operating System) (affected version unknown). It has been declared as critical. Affected

Common Vulnerabilities and Exposures

ManageEngine Desktop Central prior 10.0.683 Notification Server command injection

A vulnerability was found in ManageEngine Desktop Central (Endpoint Management Software). It has been rated as critical. Affected by this

Common Vulnerabilities and Exposures

Butter JPNS Kernel input validation [CVE-2021-39230]

A vulnerability classified as critical has been found in Butter (the affected version unknown). This affects an unknown functionality of

Common Vulnerabilities and Exposures

ManageEngine ADManager Plus up to 7110 improper authentication

A vulnerability classified as critical was found in ManageEngine ADManager Plus up to 7110. This vulnerability affects some unknown functionality.

Common Vulnerabilities and Exposures

ManageEngine ADSelfService Plus up to 6111 server-side request forgery

A vulnerability, which was classified as critical, has been found in ManageEngine ADSelfService Plus up to 6111. This issue affects

Common Vulnerabilities and Exposures

ManageEngine ADSelfService Plus up to 6111 Mail Privilege Escalation

A vulnerability, which was classified as problematic, was found in ManageEngine ADSelfService Plus up to 6111. Affected is an unknown

Common Vulnerabilities and Exposures

ManageEngine ADSelfService Plus up to 6111 User Account Privilege Escalation

A vulnerability has been found in ManageEngine ADSelfService Plus up to 6111 and classified as problematic. Affected by this vulnerability

Common Vulnerabilities and Exposures

Nlnet Labs Routinator up to 0.9.x RPKI CA max-length denial of service

A vulnerability was found in Nlnet Labs Routinator up to 0.9.x and classified as problematic. Affected by this issue is

Common Vulnerabilities and Exposures

edge.js up to 5.3.1 type confusion [CVE-2021-23443]

A vulnerability was found in edge.js up to 5.3.1 (JavaScript Library). It has been classified as critical. This affects an

Common Vulnerabilities and Exposures

jointjs Package up to 3.4.1 Parameter setByPath path type confusion

A vulnerability was found in jointjs Package up to 3.4.1. It has been declared as critical. This vulnerability affects the

Common Vulnerabilities and Exposures

Flexera FlexNet Inventory Agent/FlexNet Inventory Beacon up to 2020 R2.5 Local Privilege Escalation

A vulnerability was found in Flexera FlexNet Inventory Agent and FlexNet Inventory Beacon up to 2020 R2.5. It has been

Common Vulnerabilities and Exposures

Cloudron 6.2 Login Page returnTo cross site scripting

A vulnerability classified as problematic has been found in Cloudron 6.2 (Cloud Software). Affected is an unknown part of the

Common Vulnerabilities and Exposures

Airfield Online MySQL Backup /backups/ improper authentication

A vulnerability has been found in Airfield Online (the affected version is unknown) and classified as problematic. This vulnerability affects

Common Vulnerabilities and Exposures

Red Hat DataGrid/Infinispan REST Endpoint improper authentication

A vulnerability classified as critical was found in Red Hat DataGrid and Infinispan (affected version unknown). Affected by this vulnerability

Common Vulnerabilities and Exposures

SonicWALL Global VPN Client up to 4.10.5 Installer default permission

A vulnerability, which was classified as critical, has been found in SonicWALL Global VPN Client up to 4.10.5 (Firewall Software).

Common Vulnerabilities and Exposures

GROWI up to 4.2.19 cross site scripting [CVE-2021-20829]

A vulnerability, which was classified as problematic, was found in GROWI up to 4.2.19. This affects some unknown functionality. There

Common Vulnerabilities and Exposures

Apple tvOS up to 14.7 WebKit memory corruption

A vulnerability, which was classified as critical, has been found in Apple tvOS up to 14.7 (Digital Media Player). Affected

Common Vulnerabilities and Exposures

Apple tvOS up to 14.7 Wi-Fi improper authorization

A vulnerability, which was classified as problematic, was found in Apple tvOS up to 14.7 (Digital Media Player). This affects

Common Vulnerabilities and Exposures

Apple Safari up to 14.1.2 WebKit memory corruption

A vulnerability was found in Apple Safari up to 14.1.2 (Web Browser). It has been declared as critical. Affected by

Common Vulnerabilities and Exposures

Apple Xcode up to 12.5.1 IDE Xcode Server Privilege Escalation

A vulnerability was found in Apple Xcode up to 12.5.1 (Programming Tool Software). It has been classified as problematic. This

Common Vulnerabilities and Exposures

Apple iTunes up to 12.11.4.15 on Windows ImageIO Remote Code Execution

A vulnerability was found in Apple iTunes up to 12.11.4.15 on Windows (Multimedia Player Software). It has been rated as