Day: November 3, 2021

Inspecting ‘Previous to Present OWASP Reports’-1

Tracking Changes Made from 2007 to 2013 Reports OWASP analyses the most crucial web application security flaws. OWASP being a

Common Vulnerabilities and Exposures

Fimer Aurora Vision up to 2.97.9 Failed Login information disclosure

A vulnerability has been found in Fimer Aurora Vision up to 2.97.9 and classified as problematic. This vulnerability affects an

Common Vulnerabilities and Exposures

Mahara up to 20.04.4/20.10.2/21.04.1/21.9.x Web Service Privilege Escalation

A vulnerability was found in Mahara up to 20.04.4/20.10.2/21.04.1/21.9.x (Content Management System) and classified as problematic. This issue affects an

Common Vulnerabilities and Exposures

Firmer Aurora Vision up to 2.97.9 Web UI improper authentication

A vulnerability was found in Firmer Aurora Vision up to 2.97.9. It has been classified as critical. Affected is some

Common Vulnerabilities and Exposures

Fortinet FortiManager up to 5.6.0/6.0.x/6.2.x/6.4.6/7.0.1 information disclosure

A vulnerability was found in Fortinet FortiManager up to 5.6.0/6.0.x/6.2.x/6.4.6/7.0.1. It has been declared as problematic. Affected by this vulnerability

Common Vulnerabilities and Exposures

Mahara up to 20.04.4/20.10.2/21.04.1/21.9.x csv injection

A vulnerability was found in Mahara up to 20.04.4/20.10.2/21.04.1/21.9.x (Content Management System). It has been rated as critical. Affected by

Common Vulnerabilities and Exposures

Mozilla Firefox/Thunderbird up to 91.0 HTTP3 Header request smuggling

A vulnerability has been found in Mozilla Firefox and Thunderbird up to 91.0 (Web Browser) and classified as critical. Affected

Common Vulnerabilities and Exposures

Mozilla Firefox up to 91.x Remote Code Execution

A vulnerability was found in Mozilla Firefox up to 91.x (Web Browser) and classified as critical. Upgrading to version 92.0

Common Vulnerabilities and Exposures

Mozilla Firefox/Firefox ESR/Thunderbird reportValidity/window.open Remote Code Execution

A vulnerability was found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (the affected version unknown). It has been

Common Vulnerabilities and Exposures

Mozilla Firefox/Firefox ESR/Thunderbird Shutdown use after free

A vulnerability was found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (the affected version is unknown). It has

Common Vulnerabilities and Exposures

Eclipse Paho MQTT C Client up to 1.0 readpacket rem_len out-of-bounds write

A vulnerability was found in Eclipse Paho MQTT C Client up to 1.0. It has been rated as critical. This

Common Vulnerabilities and Exposures

Fortinet FortiClient up to 6.4.2/7.0.1 on Windows Named Pipe improper authorization

A vulnerability classified as critical has been found in Fortinet FortiClient up to 6.4.2/7.0.1 on Windows. Affected is an unknown

Common Vulnerabilities and Exposures

Mahara up to 20.04.4/20.10.2/21.04.1/21.9.x Script Element cross site scripting

A vulnerability classified as problematic was found in Mahara up to 20.04.4/20.10.2/21.04.1/21.9.x (Content Management System). Affected by this vulnerability is

Common Vulnerabilities and Exposures

Tenable Nessus up to 8.15.2 Agent access control

A vulnerability, which was classified as critical, has been found in Tenable Nessus up to 8.15.2 (Security Testing Software). Affected

Common Vulnerabilities and Exposures

AyaCMS 3.1.2 Password cross-site request forgery

A vulnerability, which was classified as problematic, was found in AyaCMS 3.1.2. This affects an unknown part of the component

Common Vulnerabilities and Exposures

fcovatti libiec_iccp_mod 1.5 Packet buffer overflow

A vulnerability has been found in fcovatti libiec_iccp_mod 1.5 and classified as problematic. This vulnerability affects an unknown function of

Common Vulnerabilities and Exposures

fcovatti libiec_iccp_mod 1.5 calloc buffer overflow

A vulnerability was found in fcovatti libiec_iccp_mod 1.5 and classified as problematic. This issue affects the function calloc. There is

Common Vulnerabilities and Exposures

Fortinet FortiManager 6.4.4/6.4.5 VPN Tunnel Status access control

A vulnerability was found in Fortinet FortiManager 6.4.4/6.4.5. It has been classified as critical. Affected is some unknown functionality of

Common Vulnerabilities and Exposures

Fortinet FortiPortal up to 6.0.5 XML Parser xml external entity reference

A vulnerability was found in Fortinet FortiPortal up to 6.0.5. It has been declared as critical. Affected by this vulnerability

Common Vulnerabilities and Exposures

Fortinet FortiPortal up to 6.0.5 License size resource consumption

A vulnerability was found in Fortinet FortiPortal up to 6.0.5. It has been rated as problematic. Affected by this issue

Common Vulnerabilities and Exposures

Fortinet FortiClientMacOS up to 6.4.5/7.0.0 on macOS Camera code injection

A vulnerability classified as problematic has been found in Fortinet FortiClientMacOS up to 6.4.5/7.0.0 on macOS. This affects an unknown

Common Vulnerabilities and Exposures

Mahara up to 20.04.4/20.10.2/21.04.1/21.9.x Page Help File pathname traversal

A vulnerability classified as critical was found in Mahara up to 20.04.4/20.10.2/21.04.1/21.9.x (Content Management System). This vulnerability affects some unknown

Common Vulnerabilities and Exposures

Datalust Seq.App.HtmlEmail 3.1.0-dev-00148/3.1.0-dev-00170/3.1.0-dev-00176 SMTP missing encryption

A vulnerability, which was classified as problematic, has been found in Datalust Seq.App.HtmlEmail 3.1.0-dev-00148/3.1.0-dev-00170/3.1.0-dev-00176. This issue affects an unknown function

Common Vulnerabilities and Exposures

NEC Transaction Server CLUSTERPRO X/EXPRESSCLUSTER X 1.0 on Windows information disclosure

A vulnerability, which was classified as problematic, was found in NEC Transaction Server CLUSTERPRO X and EXPRESSCLUSTER X 1.0 on