Archive
22 June 2021
Vulnerabilities first published on this day (UTC), newest first.
104 results · Feed
-
Unscored —
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote un…
-
Unscored —
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remot…
-
Unscored —
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsr…
-
Unscored —
It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to r…
-
Unscored —
Gitpod before 0.6.0 allows unvalidated redirects.
-
Unscored —
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher.
-
Unscored —
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitr…
-
Unscored —
A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user se…
-
Unscored —
Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the param…
-
Unscored —
A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create …
-
Unscored —
A stored cross site scripting (XSS) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to execute…
-
Medium 5.9
Padding oracle attacks
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
-
Unscored —
A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker cou…
-
Unscored —
In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. T…
-
Unscored —
In iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a miss…
-
Unscored —
In drm_syncobj_handle_to_fd of drm_syncobj.c, there is a possible use after free due to incorrect refcounting. This cou…
-
Unscored —
In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to loc…
-
Unscored —
In bind of MediaControlPanel.java, there is a possible way to lock up the system UI using a malicious media file due to…
-
Unscored —
In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent…
-
Unscored —
In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log informat…
-
Unscored —
In updateNotification of BeamTransferManager.java, there is a missing permission check. This could lead to local inform…
-
Unscored —
In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds read due to a missing …
-
Unscored —
In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI…
-
Unscored —
In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE permissions without us…
-
Unscored —
In rw_i93_send_to_lower of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could…
-
Unscored —
In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL …
-
Unscored —
In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds chec…
-
Unscored —
In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds chec…
-
Unscored —
In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds chec…
-
Unscored —
In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to an integer overflo…
-
Unscored —
In halWrapperDataCallback of hal_wrapper.cc, there is a possible out of bounds write due to a missing bounds check. Thi…
-
Unscored —
In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user c…
-
Unscored —
In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapja…
-
Unscored —
In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a ta…
-
Unscored —
In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This…
-
Unscored —
In wpas_ctrl_msg_queue_timeout of ctrl_iface_unix.c, there is a possible memory corruption due to a use after free. Thi…
-
Unscored —
In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing bounds check. This c…
-
Unscored —
In ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c, there is a possible out of bounds read due to a heap buffer over…
-
Unscored —
In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Unscored —
In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bou…