Archive
14 February 2022
Vulnerabilities first published on this day (UTC), newest first.
69 results · Feed
-
Medium 5.4
NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user …
-
High 7.1
Incorrect Authorization in librenms/librenms
Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.
-
Unscored —
njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerabil…
-
Unscored —
njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njs_await_fulfilled.
-
Unscored —
njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njs_object_set_prototype in /s…
-
Unscored —
njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src…
-
Unscored —
Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested …
-
Medium 6.2
Cross-site Scripting in svg-sanitizer
svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-sanitizer` library prior to version 0.15.0. This issue is fixed in version 0.15.0. There is currently no workaround available.
-
Unscored —
XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input valida…
-
Unscored —
Buffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.12
The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, cra…
-
Unscored —
Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12
The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr->val.integer without any bound checks. If the client connects to the server and sends a…
-
Critical 9.6
Pre-authentication session hijacking
Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versi…
-
Unscored —
AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijac…
-
Unscored —
A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via …
-
Unscored —
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files.
-
Unscored —CVE-2022-23389 EPSS 22%
PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.
-
Medium 6.1
Stored Cross-Site-Scripting (XSS) in Markdown Editor
K-Box is a web-based application to manage documents, images, videos and geodata. Prior to version 0.33.1, a stored Cross-Site-Scripting (XSS) vulnerability is present in the markdown editor used by the document abstract and markdown file preview. A specifica…
-
Unscored —
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobile_seal/get_seal.php via the DEVICE_L…
-
Unscored —
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via the d_name parameter.
-
Unscored —
DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule.php via the ids param…
-
Unscored —
S-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id parameter.
-
Unscored —
Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class.php via doModifyParame…
-
Unscored —
Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameter_admin.class.php via the table_para …
-
Unscored —
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to…
-
Unscored —
In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer.
-
Unscored —
CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveragi…
-
Unscored —
A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online (TWO) 5.3.…
-
Unscored —
An Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management System v1.0 via the csv paramet…
-
Critical 9.8
Buffer Overflow in galois_2p8
In galois_2p8 before 0.1.2, PrimitivePolynomialField::new has an off-by-one buffer overflow for a vector.
-
Medium 6.5
Missing Authorization in snipe/snipe-it
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.
-
Unscored —
In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools tab can be used to e…
-
Unscored —
An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by cha…
-
Unscored —
Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips…
-
Medium 4.8
Due to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1.1.14 , an attacker coul…
-
Medium 5.4
IBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to cross-site scripting. Thi…
-
Unscored —
An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attacke…
-
Unscored —CVE-2021-45392 EPSS 12%
A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in page /goform/…
-
Unscored —CVE-2021-46371 Scanner template
antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in th…
-
Medium 5.9
HashiCorp Nomad Artifact Download Race Condition
HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. Fixed in 1.0.18, 1.1.12, and 1.2.6
-
Unscored —
Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, …