Archive
11 April 2022
Vulnerabilities first published on this day (UTC), newest first.
189 results · Feed
-
High 7.5
Denial of Service (DoS) in Nokogiri on JRuby
## Summary Nokogiri `v1.13.4` updates the vendored `org.cyberneko.html` library to `1.9.22.noko2` which addresses [CVE-2022-24839](https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv). That CVE is rated 7.5 (High Severity). See […
-
Medium 6.5
XML Injection in Xerces Java affects Nokogiri
## Summary Nokogiri v1.13.4 updates the vendored `xerces:xercesImpl` from 2.12.0 to 2.12.2, which addresses [CVE-2022-23437](https://nvd.nist.gov/vuln/detail/CVE-2022-23437). That CVE is scored as CVSS 6.5 "Medium" on the NVD record. Please note that this adv…
-
High 7.5
Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)
org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Users are advised to upgrade to `>= 1.9.22.noko2`. Note: The…
-
High 7.5
Out-of-bounds Write in zlib affects Nokogiri
## Summary Nokogiri v1.13.4 updates the vendored zlib from 1.2.11 to 1.2.12, which addresses [CVE-2018-25032](https://nvd.nist.gov/vuln/detail/CVE-2018-25032). That CVE is scored as CVSS 7.4 "High" on the NVD record as of 2022-04-05. Please note that this adv…
-
Medium 5.3CVE-2022-24838 EPSS 33%
Command Injection in Appointment Emails for Nextcloud Calendar
Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in Appointment Emails via Newlines: as newlines and special characters are not sanitized in the email value in the JSON request, a malicious attacker can inject n…
-
High 8.2
Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin
PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin < v1.4.0 a cross-site scripting (XSS) vulnerability was found. The vulnerability is present in all versions from v0.21 of the project…
-
Medium 5.3
Enumerable upload file names in hedgedoc
HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version 1.9.1 and later have an enumerable filename after the upload, resulting in potential information leakage of uploaded documents. This is es…
-
High 8.2
Bundled ldap-authentication-plugin fails to neutralise LDAP special elements in usernames
GoCD is an open source a continuous delivery server. The bundled gocd-ldap-authentication-plugin included with the GoCD Server fails to correctly escape special characters when using the username to construct LDAP queries. While this does not directly allow a…
-
High 8.1
SQL Injection in elide-datastore-aggregation
Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns (A column that requires a client provided param…
-
High 8.8
Incorrect Permission Assignment for Critical Resource in zerotier/zerotierone
Incorrect Permission Assignment for Critical Resource in GitHub repository zerotier/zerotierone prior to 1.8.8. Local Privilege Escalation
-
High 8.1
Missing authentication in Garden
Garden is an automation platform for Kubernetes development and testing. In versions prior to 0.12.39 multiple endpoints did not require authentication. In some operating modes this allows for an attacker to gain access to the application erroneously. The con…
-
Medium 4.3
WordPress eRoom plugin <= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerability
Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.7 allows an attacker to Sync with Zoom Meetings.
-
Medium 4.3
WordPress eRoom plugin <= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache Deletion
Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.8 allows cache deletion.
-
Unscored —
A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-log…
-
Unscored —
The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 wa…
-
High 8.8
mySCADA myPRO Command Injection
An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO versions 8.25.0 and prior.
-
High 8.1
AVEVA System Platform Cleartext Storage of Sensitive Information in Memory
AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user.
-
Unscored —
VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to …
-
Unscored —
VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the de…
-
Low 2.6
Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior…
-
Medium 4.3
Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 a…
-
Unscored —
The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affe…
-
Unscored —
The device authentication service module has a defect vulnerability introduced in the design process.Successful exploit…
-
Unscored —
The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vul…
-
Unscored —
The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful …
-
Unscored —
A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability …
-
Unscored —
The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the a…
-
Unscored —
The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confid…
-
Unscored —
The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerab…
-
Unscored —
The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-…
-
Medium 4.8
WordPress Plausible Analytics plugin <= 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPress plugin) <= 1.2.2
-
Low 2.7
WordPress WPvivid plugin <= 0.9.70 - Arbitrary File Read vulnerability
Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.9.70
-
Medium 6.5
ICSMA-22-095-01 LifePoint Informatics Patient Portal
Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.
-
Critical 10.0
ICSA-22-090-05 Rockwell Automation Logix Controllers
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compil…
-
Unscored —
A command injection vulnerability in the protest binary allows an attacker with access to the remote command line inter…
-
Unscored —
A non-admin user with user management permission can escalate his privilege to admin user via password reset functional…
-
Unscored —
An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic con…
-
Unscored —
In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privil…
-
Unscored —
In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local inf…
-
Unscored —
In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…