Archive
13 January 2022
Vulnerabilities first published on this day (UTC), newest first.
95 results · Clear filters · Feed
-
High 8.1
Adobe Experience Manager Stored XSS in workflow Stages parameter
AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be ex…
-
High 8.0
Adobe Experience Manager Stored XSS on Edit Tag page via Localization input
AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerabl…
-
High 8.1
Adobe Experience Manager Stored XSS in user name parameter in the package manager
AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be ex…
-
High 8.1
Adobe Experience Manager Stored XSS in the Carousel Set
AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be ex…
-
High 7.5
Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, S…
-
High 7.5
Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdr…
-
High 7.8
Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapd…
-
High 7.8
Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto,…
-
High 7.8
Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in S…
-
High 7.5
Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV q…
-
High 7.5
Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon…
-
High 7.5
Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value …
-
High 7.5
Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon…
-
High 8.8
DayByDay CRM - Insufficient Session Expiration after Password Change
In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even af…
-
High 7.7
flatpak-builder can access files outside the build directory.
Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies `finish-args` last in the build. At this point the build directory will have t…