Archive
February 2022
Vulnerabilities first published in this month (UTC), newest first.
1,963 results · Feed
-
Medium 5.9
IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes it…
-
Unscored —
RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This enables token manipula…
-
Unscored —
A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.…
-
Unscored —
A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using t…
-
Unscored —CVE-2022-25322 Scanner template
ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.
-
Unscored —CVE-2022-25323 Scanner template
ZEROF Web Server 2.0 allows /admin.back XSS.
-
High 7.6
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.
-
High 7.5
Cross-site Scripting in Prism
Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achieve a cross-site scripting attack. The command line plugin did not properly escape its output, leadin…
-
High 8.8
Use of Hard-coded Cryptographic Key in gravitl/netmaker
Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1.
-
Medium 5.9
Heap-based Buffer Overflow in mruby/mruby
Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
-
Medium 6.5
Auth bypass in Dark SDK
Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects. These headers may be explicitly set and contain sensitive information. By default, HttpClient handles redirection logic. If a reques…
-
Critical 9.8
Arbitrary File Write
This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.
-
High 7.5
Path Traversal
This affects the package sprinfall/webcc before 0.3.0. It is possible to traverse directories to fetch arbitrary files from the server.
-
Unscored —
Scoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown editor is vulnerable t…
-
Critical 9.4CVE-2022-0660 Scanner template
Generation of Error Message Containing Sensitive Information in microweber/microweber
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
-
High 8.2
Process Control vulnerability in Bitdefender Antivirus Plus
A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitd…
-
High 7.5CVE-2022-25314 Public exploit
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
-
Critical 9.8CVE-2022-25315 Public exploit
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
-
Medium 6.5CVE-2022-25313 Public exploit
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth…
-
Unscored —CVE-2021-46108 Public exploit
D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance confi…
-
Unscored —
TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable…
-
Unscored —
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only doma…
-
Unscored —
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentica…
-
Unscored —
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacke…
-
Unscored —
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…
-
Medium 4.3
Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via…
-
Unscored —
An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit a…
-
Unscored —
An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.
-
Unscored —
An issue was discovered in Cerebrate through 1.4. genericForm allows reflected XSS in form descriptions via a user-cont…
-
Unscored —
An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.
-
Unscored —
An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.
-
Unscored —
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plai…
-
Unscored —
An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write …
-
Unscored —
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker c…
-
Unscored —
An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces …
-
Unscored —
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the …
-
Unscored —
Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution
A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub …
-
High 8.2
snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths
snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary AppArmor policy rules via malformed content interface and layout declarations and hence escape strict snap c…
-
High 7.8
snapd could be made to escalate privileges and run programs as administrator
snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation. Fixed in snapd ver…
-
Low 3.8
snapd created ~/snap with too-wide permissions
snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and…