Archive
March 2022
Vulnerabilities first published in this month (UTC), newest first.
2,085 results · Feed
-
Low 3.7
Denial of Service (DoS)
The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString value, which will cause a crash during type check.
-
Unscored —
A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file t…
-
Unscored —CVE-2021-41987 EPSS 16%
In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that …
-
Unscored —
RunAsSpc 4.0 uses a universal and recoverable encryption key. In possession of a file encrypted by RunAsSpc, an attacke…
-
Unscored —
SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to…
-
Medium 5.5
Insertion of Sensitive Information into Log File in ansible
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials.…
-
Unscored —
A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to…
-
Unscored —
A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what…
-
Unscored —
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx…
-
Unscored —CVE-2022-0918 Public exploit
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access …
-
Unscored —
Buffer Overflow via crafted client request in Accel-PPP v1.12
The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client, cra…
-
Unscored —
In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsaf…
-
Unscored —
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. T…
-
Unscored —
In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to …
-
Unscored —CVE-2021-39706 Public exploit
In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missi…
-
Unscored —CVE-2021-39704 Public exploit
In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service…
-
Unscored —
In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. Thi…
-
Unscored —
In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foregro…
-
Unscored —
In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates wit…
-
Unscored —
In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to l…
-
Unscored —
In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directo…
-
Unscored —
In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This …
-
Unscored —
In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user …
-
Unscored —
In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due …
-
Unscored —CVE-2021-39692 Public exploit
In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to …
-
Unscored —
In multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to a logic error in the …
-
Unscored —
In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper…
-
Unscored —
In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condit…
-
Unscored —CVE-2021-39685 Public exploit
In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag …
-
Unscored —
In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer over…
-
Unscored —
In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset…
-
Unscored —
In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local…
-
High 7.8CVE-2021-39793 Exploited
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the…
KEV Apr 11, 2022 -
Unscored —
In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A
-
Unscored —
In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds writ…
-
Unscored —
In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. …
-
Unscored —
In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due…
-
Unscored —
In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation…
-
Unscored —
In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead…