Day: October 13, 2021

Anuko Time Tracker prior 1.19.30.5600 Parameter time.php date cross site scripting

A vulnerability, which was classified as problematic, was found in Anuko Time Tracker. This affects an unknown code of the

Common Vulnerabilities and Exposures

Draytek VigorConnect 1.6.0-B3 WebServlet Endpoint file inclusion

A vulnerability has been found in Draytek VigorConnect 1.6.0-B3 (Router Operating System) and classified as critical. This vulnerability affects an

Common Vulnerabilities and Exposures

VMware vRealize Orchestrator up to 8.5 Path redirect

A vulnerability was found in VMware vRealize Orchestrator up to 8.5 and classified as problematic. This issue affects some unknown

Common Vulnerabilities and Exposures

VMware vRealize Operations up to 8.5 server-side request forgery

A vulnerability was found in VMware vRealize Operations up to 8.5. It has been classified as critical. Affected is an

Common Vulnerabilities and Exposures

Draytek VigorConnect 1.6.0-B3 File Upload DownloadFileServlet pathname traversal

A vulnerability was found in Draytek VigorConnect 1.6.0-B3 (Router Operating System). It has been declared as critical. Affected by this

Common Vulnerabilities and Exposures

Draytek VigorConnect 1.6.0-B3 Html5Servlet Endpoint denial of service

A vulnerability was found in Draytek VigorConnect 1.6.0-B3 (Router Operating System). It has been rated as problematic. Affected by this

Common Vulnerabilities and Exposures

VMware vRealize Log Insight up to 8.5 Interactive Analytics Export csv injection

A vulnerability classified as critical has been found in VMware vRealize Log Insight up to 8.5. This affects an unknown

Common Vulnerabilities and Exposures

Draytek VigorConnect 1.6.0-B3 DownloadFileServlet Endpoint file inclusion

A vulnerability classified as critical was found in Draytek VigorConnect 1.6.0-B3 (Router Operating System). This vulnerability affects an unknown code

Common Vulnerabilities and Exposures

Palo Alto GlobalProtect App stack-based overflow [CVE-2021-3057]

A vulnerability, which was classified as critical, has been found in Palo Alto GlobalProtect App (unknown version). This issue affects

Common Vulnerabilities and Exposures

Minio 2021-10-10T16-53-30Z checkKeyValid improper authorization

A vulnerability, which was classified as critical, was found in Minio 2021-10-10T16-53-30Z. Affected is the function checkKeyValid. Upgrading to version

Common Vulnerabilities and Exposures

Draytek VigorConnect 1.6.0-B3 System Logs information disclosure

A vulnerability has been found in Draytek VigorConnect 1.6.0-B3 (Router Operating System) and classified as problematic. Affected by this vulnerability

Common Vulnerabilities and Exposures

Frontier Transaction input validation [CVE-2021-41138]

A vulnerability was found in Frontier (affected version not known) and classified as critical. Affected by this issue is an

Common Vulnerabilities and Exposures

Draytek VigorConnect 1.6.0-B3 cross-site request forgery [CVE-2021-20126]

A vulnerability was found in Draytek VigorConnect 1.6.0-B3 (Router Operating System). It has been classified as problematic. This affects some

Common Vulnerabilities and Exposures

Proofpoint Spam Engine prior 8.12.0-2106240000 Privilege Escalation

A vulnerability was found in Proofpoint Spam Engine (Anti-Spam Software). It has been declared as problematic. Upgrading to version 8.12.0-2106240000

Common Vulnerabilities and Exposures

Proofpoint Enterprise Protection prior 8.12.0-2108090000 Privilege Escalation

A vulnerability was found in Proofpoint Enterprise Protection. It has been rated as problematic. Upgrading to version 8.12.0-2108090000 eliminates this

Common Vulnerabilities and Exposures

TIBCO EBX Web Server improper authentication [CVE-2021-35498]

A vulnerability classified as critical has been found in TIBCO EBX (version unknown). Affected is an unknown code block of

Common Vulnerabilities and Exposures

Draytek VigorConnect 1.6.0-B3 Floor Plan Page Profile Name cross site scripting

A vulnerability classified as problematic was found in Draytek VigorConnect 1.6.0-B3 (Router Operating System). Affected by this vulnerability is some

Common Vulnerabilities and Exposures

Adobe XMP Toolkit up to 2020.1 MXF File null pointer dereference

A vulnerability, which was classified as problematic, has been found in Adobe XMP Toolkit up to 2020.1. Affected by this

Common Vulnerabilities and Exposures

SolarWinds Product Password Change session expiration [CVE-2021-35214]

A vulnerability, which was classified as problematic, was found in SolarWinds Product (the affected version unknown). This affects an unknown

Common Vulnerabilities and Exposures

Google Chrome prior 94.0.4606.81 Garbage Collection use after free

A vulnerability was found in Google Chrome (Web Browser). It has been rated as critical. This issue affects an unknown

Common Vulnerabilities and Exposures

Google Chrome prior 94.0.4606.81 Blink heap-based overflow

A vulnerability classified as critical has been found in Google Chrome (Web Browser). Affected is an unknown functionality of the

Common Vulnerabilities and Exposures

Google Chrome prior 94.0.4606.81 WebRTC heap-based overflow

A vulnerability classified as critical was found in Google Chrome (Web Browser). Affected by this vulnerability is some unknown functionality

Common Vulnerabilities and Exposures

Google Chrome prior 94.0.4606.81 sandbox [CVE-2021-37980]

A vulnerability, which was classified as critical, has been found in Google Chrome (Web Browser). Affected by this issue is

Common Vulnerabilities and Exposures

Cybozu Remote Service 3.1.8/3.1.9 cross-site request forgery

A vulnerability classified as problematic was found in Cybozu Remote Service 3.1.8/3.1.9. Affected by this vulnerability is an unknown code