All Posts by: Virtual Patching

Concrete CMS up to 8.5.5 Parameter bFilename path traversal

A vulnerability classified as critical was found in Concrete CMS up to 8.5.5 (Content Management System). This vulnerability affects an

Common Vulnerabilities and Exposures

Concrete CMS up to 8.5.5 Regular Expression path traversal

A vulnerability, which was classified as critical, has been found in Concrete CMS up to 8.5.5 (Content Management System). This

Common Vulnerabilities and Exposures

MediaTek MT6779/MT6853/MT6873/MT6885 CCU out-of-bounds read [CVE-2021-0660]

A vulnerability, which was classified as problematic, was found in MediaTek MT6779, MT6853, MT6873 and MT6885 (version unknown). Affected is

Common Vulnerabilities and Exposures

Concrete CMS up to 8.5.5 Upload File server-side request forgery

A vulnerability has been found in Concrete CMS up to 8.5.5 (Content Management System) and classified as critical. Affected by

Common Vulnerabilities and Exposures

Concrete CMS up to 8.5.5 path traversal [CVE-2021-40103]

A vulnerability was found in Concrete CMS up to 8.5.5 (Content Management System). It has been rated as critical. This

Common Vulnerabilities and Exposures

Concrete CMS up to 8.5.5 SVG Sanitizer Privilege Escalation

A vulnerability classified as problematic has been found in Concrete CMS up to 8.5.5 (Content Management System). Affected is an

Common Vulnerabilities and Exposures

Oppo Battery Application Third-Party SDK Privilege Escalation

A vulnerability classified as critical was found in Oppo Battery Application (affected version unknown). Affected by this vulnerability is some

Common Vulnerabilities and Exposures

grav-plugin-admin improper restriction of rendered ui layers

A vulnerability, which was classified as critical, has been found in grav-plugin-admin (affected version not known). Affected by this issue

Common Vulnerabilities and Exposures

grav cookie validation [CVE-2021-3818]

A vulnerability, which was classified as critical, was found in grav (the affected version unknown). This affects an unknown functionality.

Common Vulnerabilities and Exposures

inflect incorrect regex [CVE-2021-3820]

A vulnerability has been found in inflect (the affected version is unknown) and classified as critical. This vulnerability affects some

Common Vulnerabilities and Exposures

jsoneditor incorrect regex [CVE-2021-3822]

A vulnerability was found in jsoneditor (unknown version) and classified as critical. This issue affects an unknown part. Applying the

Common Vulnerabilities and Exposures

nltk incorrect regex [CVE-2021-3828]

A vulnerability was found in nltk (version unknown). It has been classified as critical. Affected is an unknown code. Applying

Common Vulnerabilities and Exposures

Concrete CMS up to 8.5.5 Markdown Comment cross site scripting

A vulnerability was found in Concrete CMS up to 8.5.5 (Content Management System). It has been declared as problematic. Affected

Common Vulnerabilities and Exposures

Concrete CMS up to 8.5.5 Blog Comment website cross site scripting

A vulnerability was found in Concrete CMS up to 8.5.5 (Content Management System). It has been rated as problematic. Affected

Common Vulnerabilities and Exposures

Concrete CMS up to 8.5.5 Calendar save ccm_token cross-site request forgery

A vulnerability classified as problematic has been found in Concrete CMS up to 8.5.5 (Content Management System). This affects an

Common Vulnerabilities and Exposures

MediaTek MT6893 Memory Management Driver denial of service [CVE-2021-0422]

A vulnerability classified as problematic was found in MediaTek MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T,

Common Vulnerabilities and Exposures

MediaTek MT6893 Memory Management Driver resource consumption

A vulnerability, which was classified as problematic, has been found in MediaTek MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD,

Common Vulnerabilities and Exposures

MediaTek MT6893 Memory Management Driver integer overflow [CVE-2021-0610]

A vulnerability, which was classified as critical, was found in MediaTek MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E,

Common Vulnerabilities and Exposures

MediaTek MT6893 m4u use after free [CVE-2021-0611]

A vulnerability has been found in MediaTek MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90,

Common Vulnerabilities and Exposures

Mediat MT6893 m4u use after free [CVE-2021-0612]

A vulnerability was found in Mediat MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595,

Common Vulnerabilities and Exposures

Firefly III cross-site request forgery [CVE-2021-3819]

A vulnerability was found in Firefly III (the affected version unknown). It has been classified as problematic. This affects some

Common Vulnerabilities and Exposures

Zoom Plugin for Microsoft Outlook prior 5.0.25611.0521 on Mac Installation access control

A vulnerability was found in Zoom Plugin for Microsoft Outlook on Mac (Groupware Software). It has been declared as critical.

Common Vulnerabilities and Exposures

Zoom Plugin for Microsoft Outlook prior 5.3.52553.0918 on macOS Plugin Installation toctou

A vulnerability was found in Zoom Plugin for Microsoft Outlook on macOS (Groupware Software). It has been rated as problematic.

Common Vulnerabilities and Exposures

HPE StoreOnce 4.3.0 cross site scripting [CVE-2021-26587]

A vulnerability classified as problematic has been found in HPE StoreOnce 4.3.0. Affected is some unknown functionality. There is no