Archive
4 January 2022
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
High 7.5
Denial-of-service in Django
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred significant overhead in evaluating a submitted password that was artificially large in relation to the comparison values. I…
-
High 7.5
Information disclosure in Django
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an …
-
Medium 5.3
Directory-traversal in Django
Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it.
-
Unscored —
VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and…
-
Unscored —
Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementatio…
-
High 7.6
Stored XSS via attribute in convos
Convos is an open source multi-user chat that runs in a web browser. Characters starting with "https://" in the chat window create an <a> tag. Stored XSS vulnerability using onfocus and autofocus occurs because escaping exists for "<" or ">" but escaping for …
-
High 7.6
Stored XSS via html file upload in convos
Convos is an open source multi-user chat that runs in a web browser. You can't use SVG extension in Convos' chat window, but you can upload a file with an .html extension. By uploading an SVG file with an html extension the upload filter can be bypassed. This…
-
High 8.2
Sandbox bypass in Latte templates
Latte is an open source template engine for PHP. Versions since 2.8.0 Latte has included a template sandbox and in affected versions it has been found that a sandbox escape exists allowing for injection into web pages generated from Latte. This may lead to XS…
-
High 7.7CVE-2022-21647 EPSS 38%
Deserialization of Untrusted Data in Codeigniter4
CodeIgniter is an open source PHP full-stack web framework. Deserialization of Untrusted Data was found in the `old()` function in CodeIgniter4. Remote attackers may inject auto-loadable arbitrary objects with this vulnerability, and possibly execute existing…
-
Critical 9.1
SQL Injection via search in USOC
USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via usersearch.php. In search terms provided by the user were not sanitized and were used directly to construct a sql statement. The only users permitted…
-
Critical 10.0
SQL Injection in USOC
USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a s…
-
High 8.8
JavaScript Prototype Pollution in oro/platform
OroPlatform is a PHP Business Application Platform. In affected versions by sending a specially crafted request, an attacker could inject properties into existing JavaScript language construct prototypes, such as objects. Later this injection may lead to JS c…
-
Medium 6.8
Denial of Service in discourse
Discourse is an open source platform for community discussion. In affected versions admins users can trigger a Denial of Service attack via the `/message-bus/_diagnostics` path. The impact of this vulnerability is greater on multisite Discourse instances (whe…
-
Critical 10.0
Improper Access Control in spinnaker
Spinnaker is an open source, multi-cloud continuous delivery platform. Spinnaker has improper permissions allowing pipeline creation & execution. This lets an arbitrary user with access to the gate endpoint to create a pipeline and execute it without authenti…
-
Unscored —
Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.
-
Medium 6.9
XSS vulnerability in oro/platform
OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template content. An attacker must have permission to create or edit an email template. For successful payload, exe…
-
Critical 9.8
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp…
-
Medium 6.6
Path Traversal in spinnaker
Spinnaker is an open source, multi-cloud continuous delivery platform. A path traversal vulnerability was discovered in uses of TAR files by AppEngine for deployments. This uses a utility to extract files locally for deployment without validating the paths in…
-
High 8.2
Server-Side Request Forgery (SSRF) in transloadit/uppy
uppy is vulnerable to Server-Side Request Forgery (SSRF)
-
Unscored —
External Control of File Name or Path in netristv/ws-scrcpy
ws-scrcpy is vulnerable to External Control of File Name or Path
-
Unscored —
In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This co…
-
Unscored —
In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt fro…
-
Unscored —
In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple…
-
Unscored —
In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local inf…
-
Medium 5.5
In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to loc…
-
Unscored —
In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local inform…
-
Unscored —
In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of pr…
-
Unscored —
In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local …
-
Medium 6.7
In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalat…
-
Unscored —
In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of pr…
-
Unscored —
In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of…
-
Unscored —
In wifi driver, there is a possible system crash due to a missing validation check. This could lead to remote denial of…
-
Unscored —
In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote in…
-
Unscored —
A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the a…
-
Unscored —
An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attac…
-
High 7.5
Inefficient Regular Expression Complexity in nltk/nltk
nltk is vulnerable to Inefficient Regular Expression Complexity
-
Unscored —
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the…
-
Unscored —
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL…
-
Unscored —
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.goto…
-
Unscored —
A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS comman…