Archive
7 January 2022
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
High 7.5
Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.
-
High 7.7
Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read an…
-
High 7.4
The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to…
-
High 7.5
The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to cra…
-
High 7.3
Prototype Pollution
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge.
-
High 8.4
IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command …
-
High 7.5
Denial of Service in soketi
soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an e…
-
High 7.5CVE-2021-22569 Public exploit
Denial of Service of protobuf-java parsing procedure
An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived o…