Archive
January 2022
Vulnerabilities first published in this month (UTC), newest first.
2,026 results · Feed
-
High 7.5
Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdra…
-
High 7.3
Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in…
-
High 7.3
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdr…
-
High 7.3
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferenci…
-
High 7.3
Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdrago…
-
High 7.8
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdrago…
-
High 7.8
Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, S…
-
High 8.4
Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory…
-
Medium 6.5
Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IO…
-
High 7.1
Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, …
-
High 7.3
An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute…
-
High 8.8
Userfrosting - Host-Header Injection Leads to Account Takeover
In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully…
-
Critical 9.8
Talkyard - Insufficient Session Expiration
In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to g…
-
Medium 5.3
Generation of Error Message Containing Sensitive Information in star7th/showdoc
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
-
High 8.2
Heap-based Buffer Overflow in mruby/mruby
mruby is vulnerable to Heap-based Buffer Overflow
-
Unscored —
ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation (…
-
Medium 5.4
Cross site scripting in dolibarr
admin/limits.php in Dolibarr 7.0.2 allows HTML injection, as demonstrated by the MAIN_MAX_DECIMALS_TOT parameter.
-
Unscored —
DMP Roadmap before 3.0.4 allows XSS.
-
Unscored —
The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file d…
-
High 8.8CVE-2021-45960 Public exploit
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can l…
-
Unscored —CVE-2021-44852 Public exploit
An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the d…
-
Unscored —
The Datalogic DXU service on (for example) DL-Axist devices does not require authentication for configuration changes o…
-
High 7.5
golang.org/x/net/http2 allows uncontrolled memory consumption
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
-
Unscored —
Misdirected I/O in syscall
Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.
-
High 7.5
Regular expression denial of service vulnerability (ReDoS) in date
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
-
High 7.5
Cookie Prefix Spoofing in CGI::Cookie.parse
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.