Archive
12 May 2022
Vulnerabilities first published on this day (UTC), newest first.
35 results · Clear filters · Feed
-
High 7.7
Unauthorized takeover for new versions of some platform-specific gems
RubyGems is a package registry used to supply software for the Ruby language ecosystem. An ordering mistake in the code that accepts gem uploads allowed some gems (with platforms ending in numbers, like `arm64-darwin-21`) to be temporarily replaced in the CDN…
-
High 7.5
HCL Unica Platform is vulnerable to XML External Entity (XXE) injection
XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input without sufficient validation. Attackers can exploit this vulnerability to manipulate XML content and inject malicious external entity ref…
-
High 7.1
HCL Sametime is vulnerable to an information disclosure
Users are able to read group conversations without actively taking part in them. Next to one to one conversations, users are able to start group conversations with multiple users. It was found possible to obtain the contents of these group conversations witho…
-
High 8.2
HCL Sametime is susceptible a file transfer service vulnerability
User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service. When interacting in a normal matter with the Sametime chat application, users hold a cookie containing their session ID (SID). This value is…
-
High 7.0
Sysaid – Sysaid System Takeover
Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication.
-
High 7.5CVE-2022-22970 Public exploit
Denial of service in Spring Framework
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.
-
High 7.8
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a d…
-
High 7.5
EIPStackGroup OpENer Ethernet/IP Reachable Assertion
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
-
High 7.5
EIPStackGroup OpENer Ethernet/IP Reachable Assertion
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
-
High 7.5
EIPStackGroup OpENer Ethernet/IP Out-of-bounds Read
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read arbitrary data.
-
High 8.2
EIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric Types
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition.
-
High 7.8
Adobe Character Animator SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Character Animator versions 4.4.2 (and earlier) and 22.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…
-
High 7.5
An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InR…
-
High 8.2
A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 …
-
High 7.4
A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRoute…
-
High 8.8
An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.103…
-
High 7.8
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privile…
-
High 7.8
Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged use…
-
High 7.8
Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pot…
-
High 7.8
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…
-
High 7.8
Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable …
-
High 7.8
Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user …
-
High 7.8
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …
-
High 7.8
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…
-
High 8.0
Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user t…
-
High 7.8CVE-2021-26258 Public exploit
Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an auth…
-
High 7.3
Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potent…
-
High 7.8
Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticate…
-
High 7.2
Improper access control in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged use…
-
High 7.2
Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged use…
-
High 8.7
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.…
-
High 8.2
Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk
Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.
-
High 7.2
Authentication Bypass Using an Alternate Path or Channel in requarks/wiki
Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. User can get root user permissions
-
High 8.1
Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.
-
High 7.5
EncryptInterceptor does not provide complete protection on insecure networks
The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While th…