Archive
March 2022
Vulnerabilities first published in this month (UTC), newest first.
2,085 results · Feed
-
Unscored —
In DomainVerificationService, there is a possible way to access app domain verification information due to a missing pe…
-
Unscored —
In Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This could lead to local esc…
-
Unscored —
In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permiss…
-
Unscored —
In PackageManager, there is a possible way to change the splash screen theme of other apps due to a missing permission …
-
Unscored —CVE-2021-39749 Public exploit
In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission ch…
-
Unscored —
In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingInten…
-
Unscored —
In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypas…
-
Unscored —
In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could …
-
Unscored —
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, du…
-
Unscored —
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, du…
-
Unscored —
In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission…
-
Unscored —
In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could …
-
Unscored —
In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Unscored —
In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could le…
-
Unscored —
In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead…
-
Unscored —
In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsaf…
-
Unscored —
In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an un…
-
Unscored —
There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting…
-
Unscored —CVE-2021-3456 Public exploit
An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman client…
-
Unscored —
Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.
-
Unscored —
[20220309] - Core - XSS attack vector through SVG
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media.
-
Medium 6.1
[20220308] - Core - Inadequate content filtering within the filter code
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components.
-
Critical 9.8
[20220307] - Core - Variable Tampering on JInput $_REQUEST data
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $_REQUEST data.
-
Unscored —
[20220306] - Core - Inadequate validation of internal URLs
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.
-
Unscored —
[20220305] - Core - Inadequate filtering on the selected Ids
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate filtering on the selected Ids on an request could resulted into an possible SQL injection.
-
Unscored —
[20220304] - Core - Missing input validation within com_fields class inputs
An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.
-
Unscored —
[20220303] - Core - User row are not bound to a authentication mechanism
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. A user row was not bound to a specific authentication mechanism which could under very special circumstances allow an account takeover.
-
Medium 5.3
[20220302] - Core - Path Disclosure within filesystem error messages
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.
-
High 7.5
[20220301] - Core - Zip Slip within the Tar extractor
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.
-
Low 3.8
Authenticated Command Injection to RCE
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 …
-
Low 3.8
Stored Cross-Site Scripting (XSS)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vulnerable server. This issue affects: Pro…
-
High 7.4
Old sessions are not blocked by the login enable function. in snipe/snipe-it
Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.
-
Unscored —
DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, whic…
-
Medium 4.6CVE-2022-1179 EPSS 77%
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
-
Medium 4.6
Reflected Cross Site Scripting in openemr/openemr
Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
-
High 8.0CVE-2022-1181 EPSS 51%
Stored Cross Site Scripting in openemr/openemr
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2.
-
Medium 6.5
Accounting User Can Download Patient Reports in openemr in openemr/openemr
Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0.
-
High 7.3CVE-2022-1178 EPSS 52%
Stored Cross Site Scripting in openemr/openemr
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
-
Unscored —
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the pas…
-
Unscored —
RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file.