Archive
September 2020
Vulnerabilities first published in this month (UTC), newest first.
2,205 results · Feed
-
Unscored —
UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website…
-
Unscored —
Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive informat…
-
Unscored —
Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary sc…
-
Unscored —
A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bou…
-
Unscored —
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=com_pago&view=…
-
High 7.5
DotPlant2 Improper Restriction of XML External Entity Reference
An issue was discovered in DotPlant2 before 2020-09-14. In class Pay2PayPayment in payment/Pay2PayPayment.php, there is an XXE vulnerability in the checkResult function. The user input ($_POST['xml']) is used for simplexml_load_string without sanitization. NO…
-
Unscored —
SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could…
-
Unscored —
webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcemen…
-
Unscored —
webTareas through 2.1 allows files/Default/ Directory Listing.
-
Unscored —
webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.
-
Low 3.0
Duplicate plugin entries in Helm
In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs to modify a plugin's install hooks, causing a …
-
Low 3.4
Improper sanitization of plugin names in Helm
In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly. As a result, a malicious plugin author could use characters in a plugin name that would result in unexpected behavior, such as duplicating the name of another plugin or spoofin…
-
Low 2.2
Duplicated chart entries in Helm
In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repositor…
-
Unscored —
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalat…
-
Unscored —
In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of pr…
-
Unscored —
In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local…
-
Unscored —
In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial…
-
Unscored —
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote …
-
Unscored —
In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote de…
-
Unscored —
In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial …
-
Unscored —
In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of serv…
-
Unscored —
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote …
-
Unscored —
In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote …
-
Unscored —
In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote de…
-
Unscored —
In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local info…
-
Unscored —
In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information…
-
Unscored —
In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote informati…
-
Unscored —
In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local informat…
-
Unscored —
In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote in…
-
Unscored —
In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information dis…
-
Unscored —
In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remo…
-
Unscored —
In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local in…
-
Unscored —
In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information …
-
Unscored —
In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat…
-
Unscored —
In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configur…
-
Unscored —
In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote info…
-
Unscored —
In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local i…
-
Unscored —
In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…
-
Unscored —
In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…