Archive
14 January 2022
Vulnerabilities first published on this day (UTC), newest first.
148 results · Feed
-
Medium —
Improper Privilege Management in shelljs
### Impact Output from the synchronous version of `shell.exec()` may be visible to other users on the same system. You may be affected if you execute `shell.exec()` in multi-user Mac, Linux, or WSL environments, or if you execute `shell.exec()` as the root us…
-
Medium 4.0
Information Exposure
The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.
-
Unscored —
Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c.
-
Unscored —
An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string…
-
High 7.5
Denial of Service (DoS)
The package colors after 1.4.0 are vulnerable to Denial of Service (DoS) that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusab…
-
Unscored —
Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache.
-
Unscored —
Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c.
-
Unscored —
An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentat…
-
Unscored —
An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash.
-
Unscored —
Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) a…
-
Unscored —
In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL quer…
-
Unscored —
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnera…
-
Unscored —
An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-…
-
Unscored —
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of…
-
Medium 4.8
WordPress plugin Download Monitor <= 4.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WordPress plugin Download Monitor (versions <= 4.4.6).
-
Medium 6.5
Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spo…
-
Critical 9.1
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.
-
Unscored —
Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could allow…
-
Unscored —
Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions …
-
Unscored —
Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions …
-
Unscored —
In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 7…
-
Unscored —
SAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled inputs which may lead…
-
Unscored —
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check…
-
Unscored —
SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable gu…
-
Unscored —
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check…
-
Unscored —
The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any ap…
-
Unscored —
In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This co…
-
Unscored —
In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary br…
-
Unscored —
In target_init of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory due to a logic error i…
-
Unscored —
In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could …
-
Unscored —
A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e…
-
Unscored —
In mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an incorrect bounds check. …
-
Unscored —
In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to …
-
Unscored —
In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This cou…
-
Unscored —
In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead t…
-
Unscored —
In <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>. This could lead to local escala…
-
Unscored —
In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emer…
-
Unscored —
In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additio…
-
Unscored —
In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to …
-
Unscored —
In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead …