Archive
30 March 2022
Vulnerabilities first published on this day (UTC), newest first.
131 results · Feed
-
Unscored —
In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingInten…
-
Unscored —
In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypas…
-
Unscored —
In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could …
-
Unscored —
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, du…
-
Unscored —
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, du…
-
Unscored —
In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission…
-
Unscored —
In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could …
-
Unscored —
In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Unscored —
In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could le…
-
Unscored —
In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead…
-
Unscored —
In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsaf…
-
Unscored —
In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an un…
-
Unscored —
There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting…
-
Unscored —CVE-2021-3456 Public exploit
An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman client…
-
Unscored —
Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.
-
Unscored —
[20220309] - Core - XSS attack vector through SVG
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media.
-
Medium 6.1
[20220308] - Core - Inadequate content filtering within the filter code
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components.
-
Critical 9.8
[20220307] - Core - Variable Tampering on JInput $_REQUEST data
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $_REQUEST data.
-
Unscored —
[20220306] - Core - Inadequate validation of internal URLs
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.
-
Unscored —
[20220305] - Core - Inadequate filtering on the selected Ids
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate filtering on the selected Ids on an request could resulted into an possible SQL injection.
-
Unscored —
[20220304] - Core - Missing input validation within com_fields class inputs
An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.
-
Unscored —
[20220303] - Core - User row are not bound to a authentication mechanism
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. A user row was not bound to a specific authentication mechanism which could under very special circumstances allow an account takeover.
-
Medium 5.3
[20220302] - Core - Path Disclosure within filesystem error messages
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.
-
High 7.5
[20220301] - Core - Zip Slip within the Tar extractor
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.
-
Low 3.8
Authenticated Command Injection to RCE
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 …
-
Low 3.8
Stored Cross-Site Scripting (XSS)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vulnerable server. This issue affects: Pro…
-
High 7.4
Old sessions are not blocked by the login enable function. in snipe/snipe-it
Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.
-
Unscored —
DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, whic…
-
Medium 4.6CVE-2022-1179 EPSS 77%
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
-
Medium 4.6
Reflected Cross Site Scripting in openemr/openemr
Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
-
High 8.0CVE-2022-1181 EPSS 51%
Stored Cross Site Scripting in openemr/openemr
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2.
-
Medium 6.5
Accounting User Can Download Patient Reports in openemr in openemr/openemr
Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0.
-
High 7.3CVE-2022-1178 EPSS 52%
Stored Cross Site Scripting in openemr/openemr
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
-
Unscored —
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the pas…
-
Unscored —
RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file.
-
Medium 5.6
Null Pointer Dereference Caused Segmentation Fault in gpac/gpac
Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV.
-
High 7.5
Apache DolphinScheduler user registration is vulnerable to ReDoS attacks
Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.
-
Medium 6.8CVE-2022-1163 Public exploit
Cross-site Scripting (XSS) - Stored in mineweb/minewebcms
Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next.
-
High 7.1
Data Loss/Denial of Service in SWHKD
SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service.
-
Unscored —CVE-2022-24693 Public exploit
Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily …