Day: October 15, 2021

IBM Cognos Analytics 11.1.7/11.2.0 Server-Side Include Privilege Escalation

A vulnerability, which was classified as very critical, has been found in IBM Cognos Analytics 11.1.7/11.2.0 (Business Process Management Software).

Common Vulnerabilities and Exposures

IBM Cognos Analytics 11.1.7/11.2.0 New Job Page Privilege Escalation

A vulnerability, which was classified as critical, was found in IBM Cognos Analytics 11.1.7/11.2.0 (Business Process Management Software). Affected is

Common Vulnerabilities and Exposures

IBM Cognos Analytics 11.1.7/11.2.0 information disclosure [CVE-2020-4951]

A vulnerability has been found in IBM Cognos Analytics 11.1.7/11.2.0 (Business Process Management Software) and classified as problematic. Affected by

Common Vulnerabilities and Exposures

Yealink Device Management 3.6.0.20 services command injection

A vulnerability was found in Yealink Device Management 3.6.0.20 and classified as critical. Affected by this issue is an unknown

Common Vulnerabilities and Exposures

stb 2.26 JPEG File stb_image.h stbi__extend_receive buffer overflow

A vulnerability was found in stb 2.26. It has been classified as critical. This affects the function stbi__extend_receive of the

Common Vulnerabilities and Exposures

ION Group Wallstreet Suite TRM 7.4.83 on 64-bit hard-coded credentials

A vulnerability was found in ION Group Wallstreet Suite TRM 7.4.83 on 64-bit. It has been declared as problematic. This

Common Vulnerabilities and Exposures

Adobe Ops CLI up to 2.0.4 checkout_repo deserialization

A vulnerability has been found in Adobe Ops CLI up to 2.0.4 and classified as critical. Affected by this vulnerability

Common Vulnerabilities and Exposures

Enalean Tuleap Open ALM sql injection [CVE-2021-41147]

A vulnerability was found in Enalean Tuleap Open ALM (affected version not known) and classified as critical. Affected by this

Common Vulnerabilities and Exposures

Enalean Tuleap Open ALM Personal Dashboard sql injection [CVE-2021-41148]

A vulnerability was found in Enalean Tuleap Open ALM (the affected version unknown). It has been classified as critical. This

Common Vulnerabilities and Exposures

ShinHer StudyOnline System Message Board List_Add title cross site scripting

A vulnerability was found in ShinHer StudyOnline System (the affected version is unknown). It has been declared as problematic. This

Common Vulnerabilities and Exposures

Huaju Easytest cross site scripting [CVE-2021-42335]

A vulnerability was found in Huaju Easytest (unknown version). It has been rated as problematic. This issue affects an unknown

Common Vulnerabilities and Exposures

Adobe Acrobat Reader up to 21.8.0 on Android path traversal [CVE-2021-40724]

A vulnerability classified as critical has been found in Adobe Acrobat Reader up to 21.8.0 on Android (Document Reader Software).

Common Vulnerabilities and Exposures

Aruba ClearPass Policy Manager up to 6.8.9/6.9.7/6.10.1 Local Privilege Escalation

A vulnerability classified as problematic was found in Aruba ClearPass Policy Manager up to 6.8.9/6.9.7/6.10.1 (Policy Management Software). Upgrading to

Common Vulnerabilities and Exposures

Vim heap-based overflow [CVE-2021-3875]

A vulnerability, which was classified as critical, has been found in Vim (Word Processing Software) (affected version not known). Affected

Common Vulnerabilities and Exposures

corenlp xml external entity reference [CVE-2021-3878]

A vulnerability, which was classified as critical, was found in corenlp (the affected version unknown). This affects an unknown function.

Common Vulnerabilities and Exposures

Job Board Vanila Plugin up to 1.0 on WordPress Administrator ~/job-settings.php psjb_exp/psjb_curr cross site scripting

A vulnerability has been found in Job Board Vanila Plugin up to 1.0 on WordPress (Forum Software) and classified as

Common Vulnerabilities and Exposures

Libmobi out-of-bounds read [CVE-2021-3881]

A vulnerability was found in Libmobi (unknown version) and classified as problematic. This issue affects some unknown functionality. Applying the

Common Vulnerabilities and Exposures

Adobe Commerce/Magento up to 2.3.7p1/2.4.2-p2/2.4.3 cross-site request forgery

A vulnerability was found in Adobe Commerce and Magento up to 2.3.7p1/2.4.2-p2/2.4.3. It has been classified as problematic. Affected is

Common Vulnerabilities and Exposures

Adobe Connect up to 11.2.2 cross site scripting [CVE-2021-40721]

A vulnerability classified as problematic was found in Adobe Connect up to 11.2.2 (Content Management System). This vulnerability affects an

Common Vulnerabilities and Exposures

WpGenius Job Listing Plugin up to 1.0.2 on WordPress class-wpgenious-job-listing-options.php cross site scripting

A vulnerability was found in WpGenius Job Listing Plugin up to 1.0.2 on WordPress (WordPress Plugin) and classified as problematic.

Common Vulnerabilities and Exposures

Job Manager Plugin up to 0.7.25 on WordPress ~/admin-jobs.php cross site scripting

A vulnerability was found in Job Manager Plugin up to 0.7.25 on WordPress (WordPress Plugin). It has been classified as

Common Vulnerabilities and Exposures

job-portal Plugin up to 0.0.1 on WordPress jobs_function.php cross site scripting

A vulnerability was found in job-portal Plugin up to 0.0.1 on WordPress (WordPress Plugin). It has been declared as problematic.

Common Vulnerabilities and Exposures

MyBB Cross-Poster Plugin up to 1.0 on WordPress MyBBXPSettings.php cross site scripting

A vulnerability was found in MyBB Cross-Poster Plugin up to 1.0 on WordPress (Content Management System). It has been rated

Common Vulnerabilities and Exposures

KJM Admin Notices Plugin up to 2.0.1 on WordPress class-kjm-admin-notices-admin.php cross site scripting

A vulnerability classified as problematic has been found in KJM Admin Notices Plugin up to 2.0.1 on WordPress (WordPress Plugin).