Archive
2 June 2020
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
Unscored —
The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before …
-
Unscored —
go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for…
-
Unscored —
ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) …
-
High 7.5
Improper Verification of Cryptographic Signature in fastecdsa
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is …
-
High 7.5
Gravity Forms plugin leak hashed passwords
common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not considered a special case for a $current_user->get($property) call.
-
Unscored —
In Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF.
-
Unscored —
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Article…
-
Unscored —
In Joomla! before 3.9.19, incorrect input validation of the module tag option in com_modules allows XSS.
-
Unscored —
In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not block HTML inputs for Gues…
-
Unscored —
GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnera…
-
High 8.2
Regular Expression Denial of Service in websocket-extensions (NPM package)
websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequen…
-
High 8.2
Regular Expression Denial of Service in websocket-extensions (RubyGem)
websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte seque…
-
High 7.5
Improper Synchronization and Race Condition in vm-memory
rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl).
-
High 7.5
Directory Traversal with spring-cloud-config-server
Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send …
KEV Mar 25, 2022 -
Unscored —
The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using ex…
-
Medium 6.1
Grafana XSS via adding a link in General feature
Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.
-
Medium 6.1
Grafana XSS via a column style
Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.
-
Medium 6.1
Grafana XSS in Dashboard Text Panel
Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.
-
Unscored —
Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 byte…
-
Unscored —
A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdrago…
-
Unscored —
Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer all…
-
Unscored —
Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdr…
-
Unscored —
Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Co…
-
Unscored —
When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attribu…
-
Unscored —
kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130
-
Unscored —
Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdra…
-
Unscored —
NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, S…
-
Unscored —
Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as …
-
Unscored —
Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disa…
-
Unscored —
Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. …
-
Unscored —
Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdrago…
-
Unscored —
Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in S…
-
Unscored —
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbe…
-
Unscored —
Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing …
-
Unscored —
When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template wher…
-
Unscored —
Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to norm…
-
Unscored —
Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check i…
-
Unscored —
Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Aut…
-
Unscored —
Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdrag…
-
Unscored —
Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in co…