Day: October 7, 2021

Cisco Business 220 Series Smart Switch source code [CVE-2021-34744]

A vulnerability was found in Cisco Business 220 Series Smart Switch (version unknown). It has been classified as problematic. Upgrading

Common Vulnerabilities and Exposures

Cisco Business 220 Series Smart Switch source code [CVE-2021-34757]

A vulnerability was found in Cisco Business 220 Series Smart Switch (affected version unknown). It has been declared as problematic.

Common Vulnerabilities and Exposures

Cisco Small Business 220 Link Layer Discovery Protocol buffer overflow

A vulnerability has been found in Cisco Small Business 220 (affected version unknown) and classified as critical. Affected by this

Common Vulnerabilities and Exposures

Cisco Identity Services Engine Web-based Management Interface xml external entity reference

A vulnerability was found in Cisco Identity Services Engine (Policy Management Software) (affected version not known) and classified as critical.

Common Vulnerabilities and Exposures

Cisco IP Phone Debug Shell Command path traversal [CVE-2021-34711]

A vulnerability was found in Cisco IP Phone (IP Phone Software) (the affected version unknown). It has been classified as

Common Vulnerabilities and Exposures

Myucms 2.2.1 controllerindex.php sql server-side request forgery

A vulnerability was found in Myucms 2.2.1. It has been declared as critical. This vulnerability affects the function sql of

Common Vulnerabilities and Exposures

Myucms 2.2.1 controllerindex.php sj server-side request forgery

A vulnerability was found in Myucms 2.2.1. It has been rated as critical. This issue affects the function sj of

Common Vulnerabilities and Exposures

emlog 6.0 ZIP File admintemplate.php getshell os command injection

A vulnerability classified as critical has been found in emlog 6.0. Affected is the function getshell of the file admintemplate.php

Common Vulnerabilities and Exposures

October CMS up to 2.1.11 improper authentication [CVE-2021-41126]

A vulnerability classified as problematic was found in October CMS up to 2.1.11 (Content Management System). Affected by this vulnerability

Common Vulnerabilities and Exposures

WDJA CMS 1.5.2 admin/cache/manage.php denial of service

A vulnerability, which was classified as problematic, has been found in WDJA CMS 1.5.2 (Content Management System). Affected by this

Common Vulnerabilities and Exposures

XYHCMS 3.6 xyhai.php cross site scripting

A vulnerability, which was classified as problematic, was found in XYHCMS 3.6. This affects an unknown part of the file

Common Vulnerabilities and Exposures

Vyper up to 0.2.x memory corruption [CVE-2021-41121]

A vulnerability has been found in Vyper up to 0.2.x and classified as critical. This vulnerability affects an unknown code.

Common Vulnerabilities and Exposures

Scrapy up to 1.8.0/2.5.0 HttpAuthMiddleware w3lib.http.basic_auth_header http_user/http_pass information disclosure

A vulnerability was found in Scrapy up to 1.8.0/2.5.0 and classified as problematic. This issue affects the function w3lib.http.basic_auth_header of

Common Vulnerabilities and Exposures

Samsung Vision DSP Kernel Driver prior SMR Oct-2021 Release 1 buffer overflow

A vulnerability was found in Samsung Vision DSP Kernel Driver (Hardware Driver Software). It has been classified as critical. Affected

Common Vulnerabilities and Exposures

Samsung DSP Kernel Driver prior SMR Oct-2021 Release 1 heap-based overflow

A vulnerability was found in Samsung DSP Kernel Driver (Hardware Driver Software). It has been declared as critical. Affected by

Common Vulnerabilities and Exposures

TYPO3 prior 11.5.0 Deep Link Sharing cross-site request forgery

A vulnerability classified as problematic was found in TYPO3 (Content Management System). This vulnerability affects an unknown part of the

Common Vulnerabilities and Exposures

TYPO3 HTTP Host Header input validation [CVE-2021-41114]

A vulnerability, which was classified as problematic, has been found in TYPO3 (Content Management System) (unknown version). This issue affects

Common Vulnerabilities and Exposures

HackTool.Win32.Agent.gi Wordlist stack-based overflow

A vulnerability, which was classified as critical, was found in HackTool.Win32.Agent.gi (version unknown). Affected is an unknown code block of

Common Vulnerabilities and Exposures

Backdoor.Win32.Prorat.lkt FTP backdoor

A vulnerability has been found in Backdoor.Win32.Prorat.lkt (Remote Access Software) (affected version unknown) and classified as critical. Affected by this

Common Vulnerabilities and Exposures

Wowza Streaming Engine up to 4.8.11+5 Web-based Management historical.jsdata vhost resource consumption

A vulnerability was found in Wowza Streaming Engine up to 4.8.11+5 and classified as problematic. Affected by this issue is

Common Vulnerabilities and Exposures

Composer up to 1.10.22/2.1.8 Dependency command injection

A vulnerability was found in Composer up to 1.10.22/2.1.8. It has been classified as critical. This affects an unknown functionality

Common Vulnerabilities and Exposures

Backdoor.Win32.Hupigon.gy Service Port 8080 backdoor

A vulnerability was found in Backdoor.Win32.Hupigon.gy (Remote Access Software) (the affected version is unknown). It has been declared as critical.

Common Vulnerabilities and Exposures

Trojan-PSW.Win32.PdPinch.gen HTTP Request denial of service

A vulnerability was found in Trojan-PSW.Win32.PdPinch.gen (unknown version). It has been rated as problematic. This issue affects an unknown part

Common Vulnerabilities and Exposures

Backdoor.Win32.Prorat.lkt Service Port 2121 hard-coded password

A vulnerability classified as critical has been found in Backdoor.Win32.Prorat.lkt (Remote Access Software) (version unknown). Affected is an unknown code