Security Vulnerabilities - CVEs Published In 2021
Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article" feature.
CVSS Score
4.8
EPSS Score
0.005
Published
2021-07-26
Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature.
CVSS Score
4.8
EPSS Score
0.005
Published
2021-07-26
Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature.
CVSS Score
4.8
EPSS Score
0.005
Published
2021-07-26
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.
CVSS Score
9.8
EPSS Score
0.025
Published
2021-07-26
A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details.
CVSS Score
7.8
EPSS Score
0.005
Published
2021-07-26
An issue in the SeChangeNotifyPrivilege component of Abloy Key Manager Version 7.14301.0.0 allows attackers to escalate privileges via a change in permissions.
CVSS Score
9.8
EPSS Score
0.013
Published
2021-07-26
TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details.
CVSS Score
8.8
EPSS Score
0.004
Published
2021-07-26
A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges.
CVSS Score
9.8
EPSS Score
0.013
Published
2021-07-26
A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code.
CVSS Score
7.8
EPSS Score
0.005
Published
2021-07-26
A process injection vulnerability in setup.exe of AutoHotkey 1.1.32.00 allows attackers to escalate privileges.
CVSS Score
9.8
EPSS Score
0.013
Published
2021-07-26