Archive
1 March 2022
Vulnerabilities first published on this day (UTC), newest first.
57 results · Feed
-
Unscored —
tsMuxer git-2678966 was discovered to contain a heap-based buffer overflow via the function HevcUnit::updateBits in hev…
-
Unscored —
An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file.
-
Unscored —
An integer overflow in DTSStreamReader::findFrame() of tsMuxer git-2678966 allows attackers to cause a Denial of Servic…
-
Unscored —
tsMuxer git-c6a0277 was discovered to contain a segmentation fault via DTSStreamReader::findFrame in dtsStreamReader.cp…
-
Unscored —
There is an Assertion `num <= INT_BIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277.
-
Unscored —
rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode(). This vulnerability allows…
-
Unscored —
Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator pr…
-
Unscored —
An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows rem…
-
Unscored —
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the compo…
-
Unscored —
An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote…
-
Unscored —
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catal…
-
Unscored —
diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data ab…
-
Unscored —CVE-2022-25012 Public exploit
Argus Surveillance DVR v4.0 employs weak password encryption.
-
Unscored —
Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.
-
Unscored —
The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system.
-
Medium —
Scrapy cookie-setting is not restricted based on the public suffix list
### Impact Responses from domain names whose public domain name suffix contains 1 or more periods (e.g. responses from `example.co.uk`, given its public domain name suffix is `co.uk`) are able to set cookies that are included in requests to any other domain s…
-
Medium —
Multiple security issues in Pomerium's embedded envoy
Envoy, which Pomerium is based on, has issued multiple CVEs impacting stability and security. Though Pomerium may not be vulnerable to all of the issues, it is recommended that all users upgrade to Pomerium v0.16.4 as soon as possible to minimize risk. ### Im…
-
Medium —
Possible privilege escalation via bash completion script
The bash completion script for `fscrypt` through v0.3.2 allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escala…
-
Medium —
Improper random number generation in github.com/coredns/coredns
### Impact CoreDNS before 1.6.6 (using go DNS package < 1.1.25) improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to response forgeries. ### Patches The problem has been fixed in 1.6.6+. ### References - [CVE…
-
Low 2.6
Unauthorized forwarding of confidential headers in fluture-node
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `followRedirects` or `followRedirectsWith` with any of the redirection strategies built into fluture-node 4.0.0 or 4.0.1, paired with a request that includes confidential hea…
-
High 7.6
Path Traversal in ssr-pages
ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.4, a path traversal issue can occur when providing untrusted input to the `svg` property as an argument to the `build(MessagePageOptions)` function. Whi…
-
Medium 6.1
Cross Site Scripting (XSS) in ssr-pages
ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.5, a cross site scripting (XSS) issue can occur when providing untrusted input to the `redirect.link` property as an argument to the `build(MessagePageO…
-
High 8.8
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6…
-
Low 2.6
A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and …
-
Critical 9.8
Use of Externally-Controlled Format String in wire-avs
wire-avs is the audio visual signaling (AVS) component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been f…
-
Medium 4.3
A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, F…
-
High 8.8
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
High 7.7
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unau…
-
Critical 9.8
An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one…
-
High 8.1
The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before …
-
Medium 5.1
IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protec…
-
Medium 5.6
IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to…
-
Medium 4.4
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due …
-
Medium 6.2
A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with req…
-
Unscored —
An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Commen…
-
Unscored —
AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,
-
Unscored —
ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads …
-
Unscored —
There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.
-
Unscored —
Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local…
-
Medium 4.6
Denial-of-Service (DoS) Vulnerability
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack wi…