Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
353 results · page 4 of 8
Aug 1, 2024It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request toCVE-2024-6873 · Other software · ClickHouse · reported by cb7ba516-3b07-4c98-b0c2-715220f1a8f6High 8.1
It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time of execution, and no known remote code execution (RCE) code has been produced or exploited. Fixes have been merged to all currently supported version of ClickHouse. If you are maintaining your own forked version of ClickHouse or using an older version and cannot upgrade, the fix for this vulnerability can be found in this commit https://github.com/ClickHouse/ClickHouse/pull/64024 .
- Product
- ClickHouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 29, 2024Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "House No" and "DescripCVE-2024-40576 · Other software · sourcecodester · reported by MITREMedium 4.7
Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "House No" and "Description" parameters in the houses page at the index.php component.
- Product
- best_house_rental_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2024Dell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missing Encryption of Sensitive Data vulnerability in the DDAE (Starburst).CVE-2024-38302 · Other software · Dell · reported by security_alert@emc.comMedium 6.8
Dell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missing Encryption of Sensitive Data vulnerability in the DDAE (Starburst). A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
- Product
- Dell Data Lakehouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 16, 2024Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions.CVE-2024-32861 · Other software · Johnson Controls · reported by productsecurity@jci.comHigh 7.8
Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions.
- Product
- Software House C•CURE 9000 Installer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcisa.govjohnsoncontrols.com
Jul 10, 2024Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials.CVE-2024-32759 · Other software · Johnson Controls · reported by productsecurity@jci.comHigh 7.7
Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials.
- Product
- Software House C•CURE 9000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcisa.govjohnsoncontrols.com
Jul 9, 2024SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site ScriptCVE-2024-39595 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 5.4
SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows users to modify website content and on successful exploitation, an attacker can cause low impact to the confidentiality and integrity of the application.
- Product
- SAP Business Warehouse - Business Planning and Simulation
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site ScrCVE-2024-39594 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.1
SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause low impact on the confidentiality and integrity of the application.
- Product
- SAP Business Warehouse - Business Planning and Simulation
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2024Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php.CVE-2024-39210 · Other software · best_house_rental_management_system · reported by MITREHigh 7.5
Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows attackers to read arbitrary PHP files and access other sensitive information within the application.
- Product
- best_house_rental_management_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 20, 2024There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13.06.CVE-2024-37346 · Other software · Absolute Software · reported by SecurityResponse@netmotionsoftware.comMedium 4.9
There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13.06. Attackers with system administrator permissions can impair the availability of certain elements of the Secure Access administrative UI by writing invalid data to the warehouse over the network. There is no loss of warehouse integrity or confidentiality, the security scope is unchanged. Loss of availability is high.
- Product
- Secure Access
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordabsolute.comabsolute.com
Jun 5, 2024Under certain circumstances the Microsoft® Internet Information Server (IIS) used to host the C•CURE 9000 Web Server will log Microsoft Windows credential detaiCVE-2024-0912 · Other software · Johnson Controls · reported by productsecurity@jci.comHigh 8.5
Under certain circumstances the Microsoft® Internet Information Server (IIS) used to host the C•CURE 9000 Web Server will log Microsoft Windows credential details within logs. There is no impact to non-web service interfaces C•CURE 9000 or prior versions
- Product
- Software House C•CURE 9000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcisa.govjohnsoncontrols.com
May 29, 2024IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to CVE-2023-42005 · Other software · IBM · reported by psirt@us.ibm.comHigh 7.4
IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264.
- Product
- Db2 on Cloud Pak for Data
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comibm.com
May 1, 2024The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords.CVE-2024-32213 · Other software · lomag · reported by MITREMedium 5.3
The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed.
- Product
- warehouse_management
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgainsec.comgainsec.com
May 1, 2024SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups, DCVE-2024-32212 · Other software · lomag · reported by MITREHigh 8.1
SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop and frmSettings components.
- Product
- warehouse_management
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgainsec.comgainsec.com
May 1, 2024An issue in LOGINT LoMag Inventory Management v1.0.20.120 and before allows a local attacker to obtain sensitive information via the UserClass.cs and Settings.cCVE-2024-32211 · Other software · lomag · reported by MITREMedium 5.5
An issue in LOGINT LoMag Inventory Management v1.0.20.120 and before allows a local attacker to obtain sensitive information via the UserClass.cs and Settings.cs components.
- Product
- warehouse_management
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgainsec.comgainsec.com
May 1, 2024The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections.CVE-2024-32210 · Other software · lomag · reported by MITREMedium 5.3
The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections.
- Product
- warehouse_management
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgainsec.comgainsec.com
Mar 18, 2024ClickHouse is an open-source column-oriented database management system.CVE-2024-22412 · Other software · ClickHouse · reported by GitHubLow 2.4
ClickHouse is an open-source column-oriented database management system. A bug exists in the cloud ClickHouse offering prior to version 24.0.2.54535 and in github.com/clickhouse/clickhouse version 23.1. Query caching bypasses the role based access controls and the policies being enforced on roles. In affected versions, the query cache only respects separate users, however this is not documented and not expected behavior. People relying on ClickHouse roles can have their access control lists bypassed if they are using query caching. Attackers who have control of a role could guess queries and see data they shouldn't have access to. Version 24.1 of ClickHouse and version 24.0.2.54535 of ClickHouse Cloud contain a patch for this issue. Based on the documentation, role based access control should be enforced regardless if query caching is enabled or not.
- Product
- ClickHouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 1, 2024A vulnerability was found in CodeAstro House Rental Management System 1.0.CVE-2024-2076 · Other software · CodeAstro · reported by VulDBMedium 5.3
A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file booking.php/owner.php/tenant.php. The manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255392.
- Product
- House Rental Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 23, 2024A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0.CVE-2024-1825 · Other software · CodeAstro · reported by VulDBMedium 4.3
A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0. This affects an unknown part of the component User Registration Page. The manipulation of the argument address with the input <img src="1" onerror="console.log(1)"> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254613 was assigned to this vulnerability.
- Product
- House Rental Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 23, 2024A vulnerability, which was classified as critical, has been found in CodeAstro House Rental Management System 1.0.CVE-2024-1824 · Other software · CodeAstro · reported by VulDBHigh 7.3
A vulnerability, which was classified as critical, has been found in CodeAstro House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file signing.php. The manipulation of the argument uname/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254612.
- Product
- House Rental Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions CVE-2024-23689 · Other software · Clickhouse · reported by VulnCheckHigh 8.8
Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when 'sslkey' is specified and an exception, such as a ClickHouseException or SQLException, is thrown during database operations; the certificate password is then included in the logged exception message.
- Product
- Java Libraries
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 9, 2024A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6.CVE-2024-0343 · Other software · CodeAstro · reported by VulDBMedium 4.3
A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of the component Login Panel. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250111.
- Product
- Simple House Rental System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddrive.google.comvuldb.com
Dec 22, 2023ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time.CVE-2023-48704 · Other software · ClickHouse · reported by GitHubHigh 7
ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on port 9000/tcp, triggering a bug in the decompression logic of Gorilla codec that crashes the ClickHouse server process. This attack does not require authentication. This issue has been addressed in ClickHouse Cloud version 23.9.2.47551 and ClickHouse versions 23.10.5.20, 23.3.18.15, 23.8.8.20, and 23.9.6.20.
- Product
- ClickHouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 21, 2023ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time.CVE-2023-48298 · Other software · ClickHouse · reported by GitHubMedium 5.9
ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an unauthenticated attacker. The vulnerability is very similar to CVE-2023-47118 with how the vulnerable function can be exploited.
- Product
- ClickHouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 20, 2023ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time.CVE-2023-47118 · Other software · ClickHouse · reported by GitHubHigh 7
ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on port 9000/tcp, triggering a bug in the decompression logic of T64 codec that crashes the ClickHouse server process. This attack does not require authentication. Note that this exploit can also be triggered via HTTP protocol, however, the attacker will need a valid credential as the HTTP authentication take places first. This issue has been fixed in version 23.10.2.13-stable, 23.9.4.11-stable, 23.8.6.16-lts and 23.3.16.7-lts.
- Product
- ClickHouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 23, 2023An issue was discovered in ClickHouse before 22.9.1.2603.CVE-2022-44011 · Other software · Clickhouse · reported by MITREMedium 6.5
An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.
- Product
- Clickhouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordclickhouse.comclickhouse.com
Nov 23, 2023An issue was discovered in ClickHouse before 22.9.1.2603.CVE-2022-44010 · Other software · Clickhouse · reported by MITREHigh 7.5
An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endpoint (usually listening on port 8123 by default), causing a heap-based buffer overflow that crashes the process. This does not require authentication. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.
- Product
- Clickhouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordclickhouse.comclickhouse.com
Jul 20, 2023Millhouse-Project v1.414 was discovered to contain a remote code execution (RCE) vulnerability via the component /add_post_sql.php.CVE-2023-37165 · Other software · Millhouse-project Project · reported by MITRECritical 9.8
Millhouse-Project v1.414 was discovered to contain a remote code execution (RCE) vulnerability via the component /add_post_sql.php.
- Product
- Millhouse-project
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexploit-db.comexploit-db.com
Jul 10, 2023The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 730, SAP_BW 750, DW4CORE 100CVE-2023-33992 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.5
The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 730, SAP_BW 750, DW4CORE 100, DW4CORE 200, DW4CORE 300, may expose unauthorized cell values to the data response. To be able to exploit this, the user still needs authorizations on the query as well as on the keyfigure/measure level. The missing check only affects the data level.
- Product
- SAP Business Warehouse and SAP BW/4HANA
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 15, 2023Greenplum Database (GPDB) is an open source data warehouse based on PostgreSQL.CVE-2023-31131 · Other software · greenplum-db · reported by GitHubHigh 7.4
Greenplum Database (GPDB) is an open source data warehouse based on PostgreSQL. In versions prior to 6.22.3 Greenplum Database used an unsafe methods to extract tar files within GPPKGs. greenplum-db is vulnerable to path traversal leading to arbitrary file writes. An attacker can use this vulnerability to overwrite data or system files potentially leading to crash or malfunction of the system. Any files which are accessible to the running process are at risk. All users are requested to upgrade to Greenplum Database version 6.23.2 or higher. There are no known workarounds for this vulnerability.
- Product
- gpdb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 20, 2022OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component.CVE-2022-38733 · Other software · Netapp · reported by security-alert@netapp.comHigh 8.6
OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component.
- Product
- Oncommand Insight
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.netapp.comsecurity.netapp.com
Dec 3, 2022A vulnerability was found in House Rental System and classified as critical.CVE-2022-4276 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument id_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214772.
- Product
- House Rental System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2022A vulnerability has been found in House Rental System and classified as critical.CVE-2022-4275 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument search_property leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214771.
- Product
- House Rental System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2022A vulnerability, which was classified as critical, was found in House Rental System.CVE-2022-4274 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of the file /view-property.php. The manipulation of the argument property_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-214770 is the identifier assigned to this vulnerability.
- Product
- House Rental System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 19, 2022Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments.CVE-2022-39267 · Other software · brokercap · reported by GitHubHigh 8.8
Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user groups by deleting the X-Requested-With: XMLHttpRequest field in the request header. This issue has been patched in 1.8.8-release. There are no known workarounds.
- Product
- Bifrost
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder omCVE-2022-38764 · Other software · Trend Micro · reported by security@trendmicro.comHigh 7.8
A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer.
- Product
- Trend Micro HouseCall (Consumer)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhelpcenter.trendmicro.comzerodayinitiative.com
Jul 26, 2022Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter.CVE-2022-34067 · Other software · Oretnom23 · reported by MITREHigh 7.5
Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter.
- Product
- Warehouse Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 20, 2022Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/household/household.php.CVE-2022-34042 · Other software · Barangay Management System Project · reported by MITREHigh 7.2
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/household/household.php.
- Product
- Barangay Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 8, 2022Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php.CVE-2022-27352 · Other software · Simple House Rental System Project · reported by MITREHigh 8.8
Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
- Product
- Simple House Rental System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comdrive.google.com
Mar 14, 2022Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query.CVE-2021-43305 · Other software · yandex · reported by reefs@jfrog.comHigh 8.8
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits. This issue is very similar to CVE-2021-43304, but the vulnerable copy operation is in a different wildCopy call.
- Product
- clickhouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjfrog.comlists.debian.org
Mar 14, 2022Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query.CVE-2021-43304 · Other software · yandex · reported by reefs@jfrog.comHigh 8.8
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits.
- Product
- clickhouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjfrog.comlists.debian.org
Mar 14, 2022Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query.CVE-2021-42391 · Other software · yandex · reported by reefs@jfrog.comMedium 6.5
Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
- Product
- clickhouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 14, 2022Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query.CVE-2021-42390 · Other software · yandex · reported by reefs@jfrog.comMedium 6.5
Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
- Product
- clickhouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 14, 2022Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query.CVE-2021-42389 · Other software · yandex · reported by reefs@jfrog.comMedium 6.5
Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
- Product
- clickhouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 14, 2022Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query.CVE-2021-42388 · Other software · yandex · reported by reefs@jfrog.comHigh 8.1
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the lower bounds of the source of the copy operation.
- Product
- clickhouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjfrog.comlists.debian.org
Mar 14, 2022Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query.CVE-2021-42387 · Other software · yandex · reported by reefs@jfrog.comHigh 8.1
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation.
- Product
- clickhouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjfrog.comlists.debian.org
Jan 31, 2022In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.CVE-2021-46101 · Other software · Gitforwindows · reported by MITREHigh 7.5
In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.
- Product
- GIT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2021A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50.CVE-2021-42063 · Network & remote access · SAP SE · reported by cna@sap.comMedium 6.1
A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data.
- Product
- SAP Knowledge Warehouse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Oct 31, 2021Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) atCVE-2021-20839 · Other software · Antenna House, Inc. · reported by vultures@jpcert.or.jpMedium 6.5
Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition to the other servers by processing a specially crafted XML document.
- Product
- Office Server Document Converter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 31, 2021Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) atCVE-2021-20838 · Other software · Antenna House, Inc. · reported by vultures@jpcert.or.jpHigh 7.5
Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition by processing a specially crafted XML document.
- Product
- Office Server Document Converter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 29, 2021An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attaCVE-2021-32466 · Other software · Trend Micro · reported by security@trendmicro.comHigh 7
An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
- Product
- Trend Micro HouseCall for Home Networks
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhelpcenter.trendmicro.comhelpcenter.trendmicro.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.