Archive
3 May 2022
Vulnerabilities first published on this day (UTC), newest first.
109 results · Feed
-
Unscored —
In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Unscored —
In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalati…
-
Unscored —
In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check. This…
-
Medium 4.4
Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers t…
-
Medium 6.2
DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrar…
-
Medium 6.2
Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to ov…
-
Medium 4.0
Improper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device. The pa…
-
Medium 6.2
Unprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interact…
-
Medium 4.0
Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read lead…
-
Medium 4.0
Improper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows out of bounds read lead…
-
Medium 4.0
Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read lead…
-
Medium 4.0
Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read lead…
-
Medium 4.0
Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in ar…
-
Medium 6.2
Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to unins…
-
Medium 4.6
Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to…
-
High 7.7
Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity wit…
-
Medium 5.0
Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access locat…
-
Medium 5.5
Delta Electronics DMARS Improper Restriction of XML External Entity Reference
In four instances DMARS (All versions prior to v2.1.10.24) does not properly restrict references of XML external entities while processing specific project files, which may allow unauthorized information disclosure.
-
Medium 5.9
IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacke…
-
Medium 5.4
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation o…
-
Unscored —
A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload …
-
Unscored —
In SpringBootMovie <=1.2, the uploaded file suffix parameter is not filtered, resulting in arbitrary file upload vulner…
-
Unscored —
In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameter…
-
High 7.5
Insecure password handling vulnerability in Strapi
Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim's HTTP request, get the victim's cookie, perform a base64 decode on the victim's cookie, and obta…
-
Unscored —
EmpireCMS 7.5 has a SQL injection vulnerability in AdClass.php
-
Unscored —
Bluecms 1.6 has a SQL injection vulnerability at cooike.
-
Unscored —
Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.
-
High 7.1
A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft Imag…
-
Critical 9.8
A memory corruption vulnerability exists in the ioca_mys_rgb_allocate functionality of Accusoft ImageGear 19.10. A spec…
-
Medium 5.3
Illegal access to Kernel log in Fuchsia
A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater.
-
Medium 5.3
Integer Overflow in Fuchsia Kernel
The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from userspace. We recommend upgrading to kerne…
-
High 8.7
Incorrect signature verification on Google-oauth-java-client
The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from valid provider, not from someone else. An attacker can provide a compromised token with custom payloa…
-
Unscored —CVE-2022-28561 EPSS 10%
There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.0…
-
Unscored —
There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 …
-
High 7.5
Resource leakage when decoding certificates and keys
The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes cer…
-
Medium 5.9
Incorrect MAC key used in the RC4-MD5 ciphersuite
The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from …
-
Medium 5.3
OCSP_basic_verify may incorrectly verify the response signing certificate
The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response sig…
-
Critical 9.8
The c_rehash script allows command injection
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts o…
-
Unscored —
A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.