Archive
15 December 2021
Vulnerabilities first published on this day (UTC), newest first.
255 results · Feed
-
Critical 9.1
Incorrect Authentication in elabftw
eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability which allows an attacker to authenticate as an existing user, if that user was created using a single sign-on authentication option such as L…
-
High 8.1
Account takeover in eLabFTW
eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability which allows any authenticated user to gain access to arbitrary accounts by setting a specially crafted email address. This vulnerability imp…
-
High —
DoS Vulnerability from Upstream Actix Web Issues
### Impact This vulnerability affects all users of the `perseus deploy` functionality who have not exported their sites to static files. If you are using the inbuilt Perseus server in production, there is a memory leak in Actix Web stemming from [this upstrea…
-
Unscored —
Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/adm…
-
Unscored —
Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF o…
-
Unscored —
An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to an…
-
Unscored —
A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Co…
-
Critical 9.8
ThinkPHP5 SQL Injection vulnerability
SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php.
-
Medium 6.1
Cross-site Scripting in Anchor CMS
Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving ot…
-
High 8.5
PHP file inclusion in the Sulu admin panel
Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker can read arbitrary local files via a PHP file include. In a default configuration this also leads to remote code execution. The problem is pa…
-
High 7.2
Privilege escalation in the Sulu Admin panel
Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who have access to any subset of the admin UI are able to elevate their privilege. Over the API it was possible for them to give themselves pe…
-
High 7.7
Files on the host computer can be accessed from the Gradio interface
Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.0 there is a vulnerability that affects anyone who creates and publicly shares Gradio interfaces. File paths are not restricted and users w…
-
Unscored —
Thruk before 2.44 allows XSS for a quick command.
-
High 8.8
SQL injection in Tuleap
Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly user settings when constructing the SQL query to browse and search commits in the CVS repositorie…
-
Unscored —
stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-bas…
-
Medium 6.7
Indirect LDAP injection in Tuleap
Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly the search filter built from the ldap_id attribute of a user during the daily synchronization. A …
-
Medium 6.7
Indirect LDAP injection in Tuleap
Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. This is a follow up to GHSA-887w-pv2r-x8pm/CVE-2021-41276, the initial fix was incomplete. Tuleap does not sanitize properly the search filter built fro…
-
Critical 9.8
WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise
Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.
-
Unscored —
In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could l…
-
Unscored —
In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This …
-
Unscored —
In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A
-
Unscored —
In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote …
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A
-
Unscored —
In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization o…
-
Unscored —
In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to l…
-
Unscored —
In valid_ipc_dram_addr of cm_access_control.c, there is a possible out of bounds read due to an integer overflow. This …
-
Unscored —
In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an …
-
Unscored —
In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, wit…
-
Unscored —
In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling…
-
Unscored —
In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to …
-
Unscored —
In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection…
-
Unscored —
In onCreate of RequestIgnoreBatteryOptimizations.java, there is a possible way to determine whether an app is installed…
-
Unscored —
In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. Thi…
-
Unscored —
In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check.…
-
Unscored —
In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to miss…
-
Unscored —
In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This c…
-
Unscored —
In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, withou…
-
Unscored —
In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arb…