Archive
29 April 2022
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
Unscored —
static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal.
-
Medium 6.6
NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with phys…
-
Medium 6.1
Woodpecker allows cross-site scripting (XSS) via build logs
Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.
-
Medium 5.4
Cross-site Scripting (XSS)
This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload.
-
Medium 4.0
DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical locat…
-
Critical 9.3
Improper handling of Length parameter in erudika/scoold
Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server.
-
High 8.8
WordPress Rara One Click Demo Import plugin <= 1.2.9 - Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerability
Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin <= 1.2.9 on WordPress allows attackers to trick logged-in admin users into uploading dangerous files into /wp-content/uploads/ directory.
-
Medium 5.4
WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin <= 211130 on WordPress allows attackers to clean up Log archive, download system info file, plugin system settings, plugin options settings, gen…
-
High 8.8
Metasys privilege management
Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator.
-
Unscored —
USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root ac…
-
Unscored —
USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer downl…
-
Unscored —
USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/…
-
Unscored —
USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because so…
-
Critical —
Object state limitation has no effect
Object state limitation is a policy you can use in your roles to limit access to content based on specific object state values. Due to a flawed earlier update, these limitations were ineffective in releases made since February 16th 2022. They would grant acce…
-
Unscored —
A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can le…
-
Unscored —
Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request.
-
Unscored —
ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe.
-
High 7.8
Delta Electronics ASDA-Soft Out-of-bounds Write
ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition.
-
High 7.8
Delta Electronics ASDA-Soft Out-of-bounds Read
ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.
-
Unscored —
A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header…
-
Medium 4.3
Missing authorization in Moodle
Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.
-
Medium 5.9
IBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to d…
-
Medium 4.3
Improper Authentication in moodle
Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.
-
Unscored —
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a lo…
-
High 8.8CVE-2022-1227 Public exploit
Podman publishes a malicious image to public registries
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. Th…
-
Unscored —
A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function…
-
Unscored —
A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker…
-
Critical —
Object state limitation has no effect
Object state limitation is a policy you can use in your roles to limit access to content based on specific object state values. Due to a flawed earlier update, these limitations were ineffective in releases made since February 16th 2022. They would grant acce…
-
Unscored —
A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is…
-
Unscored —
A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PC…
-
High 8.1
Elcomplus SmartPTT SCADA Server Information Exposure
Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization.
-
High 7.6
Elcomplus SmartPTT SCADA Server Cross-site Request Forgery
Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
-
Unscored —CVE-2022-29856 Public exploit
A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.
-
Unscored —
Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection.
-
Critical 9.9CVE-2022-24900 Scanner template
Absolute Path Traversal due to incorrect use of `send_file` call in Piano LED Visualizer
Piano LED Visualizer is software that allows LED lights to light up as a person plays a piano connected to a computer. Version 1.3 and prior are vulnerable to a path traversal attack. The `os.path.join` call is unsafe for use with untrusted input. When the `o…
-
Medium 4.8
Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin
A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List of subjects".
-
Low 3.5
automad Dashboard cross site scripting
A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Home</title><script>alert("home")</script><title> leads to a cross site scrip…
-
Unscored —
Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an…
-
Unscored —
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send …
-
Unscored —
The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sen…