Archive
23 December 2021
Vulnerabilities first published on this day (UTC), newest first.
94 results · Feed
-
Unscored —
In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when…
-
Unscored —
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earl…
-
Unscored —
PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF…
-
High 7.5
Inefficient Regular Expression Complexity in nltk
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service (ReDoS) attac…
-
High 7.8
Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning
pytorch-lightning is vulnerable to Deserialization of Untrusted Data
-
Medium 6.2
DoS vulnerability
cordova-plugin-fingerprint-aio is a plugin provides a single and simple interface for accessing fingerprint APIs on both Android 6+ and iOS. In versions prior to 5.0.1 The exported activity `de.niklasmerz.cordova.biometric.BiometricActivity` can cause the app…
-
High 8.2
NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply ind…
-
Unscored —
Zoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin configurations.
-
Unscored —
The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injecti…
-
Unscored —
The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks.…
-
Critical 9.8
Apache Solr information disclosure vulnerability through DataImportHandler
An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to …
-
Unscored —
TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.
-
Unscored —
load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or…
-
Unscored —
An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being access…
-
Unscored —
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 user…
-
Unscored —
Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit h…
-
Unscored —
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corru…
-
Unscored —
Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak c…
-
Unscored —
Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potent…
-
Unscored —
Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap…
-
Unscored —
Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap…
-
Unscored —
Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potent…
-
Unscored —
Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially explo…
-
Unscored —
Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised th…
-
Unscored —
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corru…
-
Unscored —
Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-o…
-
Unscored —
Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit h…
-
Unscored —
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the ren…
-
Unscored —
Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to i…
-
Unscored —
Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain sp…
-
Unscored —
Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit h…
-
Unscored —
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a…
-
Unscored —
Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to l…
-
Unscored —
Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass nav…
-
Unscored —
Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote a…
-
Unscored —
Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-…
-
Unscored —
Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform …
-
Unscored —
Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to b…
-
Unscored —
Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to…