Security Vulnerabilities - CVEs Published In 2021
An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100.
CVSS Score
7.5
EPSS Score
0.008
Published
2021-08-13
The ON24 ScreenShare (aka DesktopScreenShare.app) plugin before 2.0 for macOS allows remote file access via its built-in HTTP server. This allows unauthenticated remote users to retrieve files accessible to the logged-on macOS user. When a remote user sends a crafted HTTP request to the server, it triggers a code path that will download a configuration file from a specified remote machine over HTTP. There is an XXE flaw in processing of this configuration file that allows reading local (to macOS) files and uploading them to remote machines.
CVSS Score
9.1
EPSS Score
0.02
Published
2021-08-13
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.
CVSS Score
5.4
EPSS Score
0.005
Published
2021-08-13
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.
CVSS Score
7.5
EPSS Score
0.01
Published
2021-08-13
The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.
CVSS Score
5.4
EPSS Score
0.013
Published
2021-08-13
The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.
CVSS Score
5.4
EPSS Score
0.005
Published
2021-08-13
The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.
CVSS Score
9.8
EPSS Score
0.01
Published
2021-08-13
The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.
CVSS Score
6.1
EPSS Score
0.006
Published
2021-08-13
The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.
CVSS Score
5.3
EPSS Score
0.008
Published
2021-08-13
The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.
CVSS Score
7.2
EPSS Score
0.007
Published
2021-08-13