Latest CVE Feed
-
6.1
MEDIUMCVE-2021-4253
A vulnerability, which was classified as problematic, was found in ctrlo lenio. Affected is an unknown function in the library lib/Lenio.pm of the component Ticket Handler. The manipulation of the argument site_id leads to cross site scripting. It is poss... Read more
Affected Products : lenio- Published: Dec. 18, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-4252
A vulnerability, which was classified as problematic, has been found in WP-Ban. This issue affects the function toggle_checkbox of the file ban-options.php. The manipulation of the argument $_SERVER["HTTP_USER_AGENT"] leads to cross site scripting. The at... Read more
Affected Products : wp-ban- Published: Dec. 18, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-4251
A vulnerability classified as problematic was found in as. This vulnerability affects the function getFullURL of the file include.cdn.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 4acad... Read more
Affected Products : as- Published: Dec. 18, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-4250
A vulnerability classified as problematic has been found in cgriego active_attr up to 0.15.2. This affects the function call of the file lib/active_attr/typecasting/boolean_typecaster.rb of the component Regex Handler. The manipulation of the argument val... Read more
Affected Products : active_attr- Published: Dec. 18, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-4249
A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file xml-conduit/src/Text/XML/Stream/Parse.hs of the component DOCTYPE Entity Expansion Handler. The manipulation leads to infinite loo... Read more
Affected Products : xml-conduit- Published: Dec. 18, 2022
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-4248
A vulnerability was found in kapetan dns up to 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file DNS/Protocol/Request.cs. The manipulation leads to insufficient entropy in prng. The attack may be lau... Read more
Affected Products : kapetan_dns- Published: Dec. 18, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-4247
A vulnerability has been found in OWASP NodeGoat and classified as problematic. This vulnerability affects unknown code of the file app/routes/research.js of the component Query Parameter Handler. The manipulation leads to denial of service. The attack ca... Read more
Affected Products : nodegoat- Published: Dec. 18, 2022
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-4246
A vulnerability was found in roxlukas LMeve and classified as critical. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument X-Forwarded-For leads to sql injection. The attack may be launched r... Read more
Affected Products : lmeve- Published: Dec. 17, 2022
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-4245
A vulnerability classified as problematic has been found in chbrown rfc6902. This affects an unknown part of the file pointer.ts. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The expl... Read more
Affected Products : rfc6902- Published: Dec. 15, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-4244
A vulnerability classified as problematic has been found in yikes-inc-easy-mailchimp-extender Plugin up to 6.8.5. This affects an unknown part of the file admin/partials/ajax/add_field_to_form.php. The manipulation of the argument field_name/merge_tag/fie... Read more
Affected Products : easy_forms_for_mailchimp- Published: Dec. 12, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-4242
A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown functionality of the file ip/syscmd.htm. The manipulation leads to os command injection. The attack may be launched rem... Read more
Affected Products : br270n_firmware brc76n_firmware gr297n_firmware rb-1732_firmware gr297n br270n brc76n rb-1732- Published: Nov. 30, 2022
- Modified: Nov. 21, 2024
-
5.3
MEDIUMCVE-2021-4241
A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit ... Read more
Affected Products : php_server_monitor- Published: Nov. 15, 2022
- Modified: Nov. 21, 2024
-
5.3
MEDIUMCVE-2021-4240
A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. ... Read more
Affected Products : php_server_monitor- Published: Nov. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-4234
OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.... Read more
Affected Products : openvpn_access_server- Published: Jul. 06, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-4232
A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. It is poss... Read more
Affected Products : zoo_management_system- Published: May. 26, 2022
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-4231
A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require... Read more
Affected Products : angular- Published: May. 26, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-4230
A vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /backups/ of the MySQL backup handler. An attacker is able to get access to sensitive data without proper authentication. It is recommende... Read more
Affected Products : airfield_online- Published: May. 24, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-4229
A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is reco... Read more
Affected Products : ua-parser-js- Published: May. 24, 2022
- Modified: Nov. 21, 2024
-
7.4
HIGHCVE-2021-4228
Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPS connection. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.00.0.... Read more
- Published: Oct. 24, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-4225
The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by che... Read more
- Published: Apr. 25, 2022
- Modified: Nov. 21, 2024