Archive
7 March 2022
Vulnerabilities first published on this day (UTC), newest first.
128 results · Feed
-
Unscored —
A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, wh…
-
Unscored —
YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page c…
-
Medium 5.0
GateManager information leak for LinkManager Users
This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files.
-
Unscored —
Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users…
-
Unscored —
Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauth…
-
Unscored —
Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing con…
-
Unscored —CVE-2022-0725 Public exploit
A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads t…
-
Unscored —
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a co…
-
Unscored —
A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with Overlay…
-
Unscored —
There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploit…
-
Unscored —
There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vul…
-
Unscored —
There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead t…
-
Unscored —
There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may caus…
-
Unscored —
There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will …
-
Unscored —
There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vuln…
-
Unscored —
There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will aff…
-
Unscored —
There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability ma…
-
Unscored —
There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitati…
-
Unscored —
There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitat…
-
Unscored —
There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of …
-
Unscored —
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerabili…
-
Unscored —
There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affe…
-
Unscored —
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerabili…
-
Unscored —
There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Succe…
-
Unscored —
There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitat…
-
Unscored —
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability ma…
-
Unscored —
There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability…
-
Critical 9.8
Command Injection in CasaOS
CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.
-
High 7.1
SQL Injection in salesagility/suitecrm
SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5.
-
High 7.8
Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)
Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate…
-
Medium 6.1
messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)
A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generat…
-
Unscored —
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an att…
-
Unscored —
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows a…
-
Unscored —
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an att…
-
Unscored —
Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an…
-
Unscored —
Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FIL…
-
Unscored —
A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link …
-
Unscored —
Directory traversal vulnerability in pfSense-pkg-WireGuard pfSense-pkg-WireGuard 0.1.5 versions prior to 0.1.5_4 and pf…
-
Unscored —
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows a…
-
Unscored —CVE-2022-0535 Scanner template
E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)
The E2Pdf WordPress plugin before 1.16.45 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed