Latest CVE Feed
-
7.2
HIGHCVE-2021-40189
PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.... Read more
Affected Products : phpfusion- Published: Oct. 11, 2021
- Modified: Nov. 21, 2024
-
7.2
HIGHCVE-2021-40188
PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability. The File Manager function in admin panel does not filter all PHP extensions such as ".php, .php7, .phtml, .php5, ...". An attacker can upload a malicious file and execute code on th... Read more
Affected Products : phpfusion- Published: Oct. 11, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-40186
The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, formerly known as DotNetNuke. SSRF vulnerabilities allow the attacker to exploit the target system to make network requests on their beha... Read more
Affected Products : dotnetnuke- Published: Jun. 02, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-40180
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts.... Read more
Affected Products : wechat- Published: Jul. 26, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-40178
Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.... Read more
Affected Products : manageengine_log360- Published: Aug. 29, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-40177
Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.... Read more
Affected Products : manageengine_log360- Published: Aug. 29, 2021
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-40176
Zoho ManageEngine Log360 before Build 5225 allows stored XSS.... Read more
Affected Products : manageengine_log360- Published: Aug. 29, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-40175
Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.... Read more
Affected Products : manageengine_log360- Published: Aug. 29, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-40174
Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings.... Read more
Affected Products : manageengine_log360- Published: Aug. 29, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-40173
Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings.... Read more
Affected Products : manageengine_cloud_security_plus- Published: Aug. 29, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-40172
Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.... Read more
Affected Products : manageengine_log360- Published: Aug. 29, 2021
- Modified: Nov. 21, 2024
-
5.3
MEDIUMCVE-2021-40171
The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to block legitimate traffic while not alerting the owner of the system.... Read more
- Published: Dec. 15, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-40170
An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversar... Read more
- Published: Dec. 15, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40167
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in th... Read more
Affected Products : design_review- Published: Jan. 25, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40166
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.... Read more
Affected Products : autocad autocad_architecture autocad_civil_3d autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_plant_3d design_review +9 more products- Published: Oct. 07, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40165
A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.... Read more
Affected Products : autocad autocad_architecture autocad_civil_3d autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_plant_3d design_review +9 more products- Published: Oct. 07, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40164
A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.... Read more
Affected Products : autocad autocad_architecture autocad_civil_3d autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_plant_3d design_review +9 more products- Published: Oct. 07, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40163
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component.... Read more
Affected Products : autocad autocad_architecture autocad_civil_3d autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_plant_3d design_review +9 more products- Published: Oct. 07, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40162
A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.... Read more
Affected Products : autocad autocad_architecture autocad_civil_3d autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_plant_3d design_review +9 more products- Published: Oct. 07, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40161
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version.... Read more
Affected Products : autocad advance_steel autocad_architecture autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_plant_3d design_review +3 more products- Published: Dec. 23, 2021
- Modified: Nov. 21, 2024