VYPR

CVEs

411,285 total · page 5140 of 8,226

AllCriticalHighKEV
  • CVE-2021-30126MedApr 2, 2021
    Lightmeter
    ControlCenter
    risk 0.42cvss 6.5epss 0.01

    Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Lightmeter instance to access application settings, possibly including an SMTP password and a Slack access token, via a settings HTTP query.

  • CVE-2021-30125MedApr 2, 2021
    Jamf
    Jamf
    risk 0.40cvss 6.1epss 0.01

    Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.

  • CVE-2021-30072CriApr 2, 2021
    Dlink
    Dir878 Firmware
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication.

  • CVE-2021-28941MedApr 2, 2021
    Magpierss
    Magpierss
    risk 0.35cvss 5.3epss 0.01

    Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/magpie_debug.php or /scripts/magpie_simple.php page, it's possible to request any internal page if you use a https request.

  • CVE-2021-28940CriApr 2, 2021
    Magpierss
    Magpierss
    risk 0.64cvss 9.8epss 0.03

    Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpie_debug.php and /scripts/magpie_simple.php page that if you send a specific…

  • CVE-2020-21590MedApr 2, 2021
    WuzhiCMS
    CMS
    risk 0.28cvss 4.3epss 0.01

    Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter.

  • CVE-2020-21588MedApr 2, 2021
    Coreftp
    Core FTP LE
    risk 0.36cvss 5.5epss 0.00

    Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Username editbox.

  • CVE-2020-21585CriApr 2, 2021
    Emlog
    Emlog
    risk 0.64cvss 9.8epss 0.03

    Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.

  • CVE-2021-3374MedApr 2, 2021
    RStudio
    Shiny Server
    risk 0.36cvss 5.3epss 0.15

    Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.

  • CVE-2021-29661MedApr 2, 2021
    Softing AG
    OPC Toolbox
    risk 0.35cvss 5.4epss 0.01

    Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page…

  • CVE-2021-29660HigApr 2, 2021
    Softing AG
    OPC Toolbox
    risk 0.57cvss 8.8epss 0.01

    A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker.

  • CVE-2021-27973HigApr 2, 2021
    Piwigo
    Piwigo
    risk 0.51cvss 7.2epss 0.11

    SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.

  • CVE-2021-1879MedKEVApr 2, 2021
    Apple Inc.
    Ipados
    risk 0.52cvss 6.1epss 0.07

    This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue…

  • CVE-2021-1871CriKEVApr 2, 2021
    Apple Inc.
    macOS
    risk 0.76cvss 9.8epss 0.07

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a…

  • CVE-2021-1870CriKEVApr 2, 2021
    Apple Inc.
    macOS
    risk 0.76cvss 9.8epss 0.08

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a…

  • CVE-2021-1844HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.57cvss 8.8epss 0.02

    A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code…

  • CVE-2021-1818CriApr 2, 2021
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.03

    A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause unexpected…

  • CVE-2021-1806HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.46cvss 7.0epss 0.01

    A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitrary code with kernel privileges.

  • CVE-2021-1805HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitrary code with kernel…

  • CVE-2021-1803LowApr 2, 2021
    Apple Inc.
    macOS
    risk 0.21cvss 3.3epss 0.01

    The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A local application may be able to enumerate the user's iCloud documents.

  • CVE-2021-1802HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A local attacker may be able to elevate their privileges.

  • CVE-2021-1801MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.02

    This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe…

  • CVE-2021-1800MedApr 2, 2021
    Apple Inc.
    Xcode
    risk 0.36cvss 5.5epss 0.01

    A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode.

  • CVE-2021-1799MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.02

    A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able…

  • CVE-2021-1797MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to read arbitrary files.

  • CVE-2021-1796CriApr 2, 2021
    Apple Inc.
    Ipados
    risk 0.64cvss 9.8epss 0.02

    An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.

  • CVE-2021-1795CriApr 2, 2021
    Apple Inc.
    Ipados
    risk 0.64cvss 9.8epss 0.02

    An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.

  • CVE-2021-1794CriApr 2, 2021
    Apple Inc.
    Ipados
    risk 0.64cvss 9.8epss 0.02

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.

  • CVE-2021-1793HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code…

  • CVE-2021-1790HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution.

  • CVE-2021-1761HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.49cvss 7.5epss 0.02

    This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause a denial of service.

  • CVE-2021-1753HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

  • CVE-2020-11924MedApr 2, 2021
    WiZ Colors
    A60
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for a discarded or resold device.

  • CVE-2020-11923MedApr 2, 2021
    WiZ Colors
    A60
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged.

  • CVE-2021-22865MedApr 2, 2021
    GitHub
    Enterprise Server
    risk 0.42cvss 6.5epss 0.01

    An improper access control vulnerability was identified in GitHub Enterprise Server that allowed access tokens generated from a GitHub App's web authentication flow to read private repository metadata via the REST API without having been granted the appropriate permissions. To…

  • CVE-2021-1792HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.57cvss 8.8epss 0.02

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary…

  • CVE-2021-1791MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and…

  • CVE-2021-1789HigKEVApr 2, 2021
    Apple Inc.
    macOS
    risk 0.70cvss 8.8epss 0.14

    A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web…

  • CVE-2021-1788HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.57cvss 8.8epss 0.02

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted…

  • CVE-2021-1787HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local attacker may be able to elevate their privileges.

  • CVE-2021-1786MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.00

    A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files.

  • CVE-2021-1785HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to…

  • CVE-2021-1783HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An access issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to…

  • CVE-2021-1782HigKEVApr 2, 2021
    Apple Inc.
    macOS
    risk 0.58cvss 7.0epss 0.02

    A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple…

  • CVE-2021-1781MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A malicious application may be…

  • CVE-2021-1780MedApr 2, 2021
    Apple Inc.
    Ipados
    risk 0.29cvss 4.4epss 0.00

    A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack.

  • CVE-2021-1779HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges.

  • CVE-2021-1778MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a…

  • CVE-2021-1777HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code…

  • CVE-2021-1776HigApr 2, 2021
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted font file…