Archive
18 May 2022
Vulnerabilities first published on this day (UTC), newest first.
20 results · Clear filters · Feed
-
High 7.8
Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
-
High 8.2
Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7.
-
High 8.8
TIBCO BusinessConnect Trading Community Management Cross-Site Request Forgery Vulnerability
The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute Cross-Site Request Forgery (CSRF) on the a…
-
High 8.0
TIBCO BusinessConnect Trading Community Management Stored Cross Site Scripting Vulnerability
The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affe…
-
High 7.3
Windows Unquoted/Trusted Service Paths
SLM has an issue with Windows Unquoted/Trusted Service Paths Security Issue. All installations version 9.x.x prior to 9.20.1 should be patched.
-
High 7.8
Inkscape Out-of-bounds Write
Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.
-
High 8.0
A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authen…
-
High 8.8
A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud …
-
High 7.8
A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System …
-
High 7.8
A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation…
-
High 7.5
Server-Side Request Forgery (SSRF) in jgraph/drawio
Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.7.
-
High 7.5
Update package downgrade in Zoom Client for Meetings for Windows
The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update process. This issue could be used in a more sophisticated a…
-
High 8.1
Improper XML Parsing in Zoom Client for Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new message c…
-
High 8.8
ToolJet - Token Leakage via Referer Header
ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover . If the user opens the invite link/signup link and then clicks on any external links within the page, it leaks the password set token/signup t…
-
High 8.3
Improper Input Validation in jgraph/drawio
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.
-
High 7.5
Cross-site Scripting (XSS) - Generic in octoprint/octoprint
Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.
-
High 7.5
Cross-site Scripting (XSS) - DOM in octoprint/octoprint
Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0.
-
High 7.5
Insecure PRNG use in random_password_generator
The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate passwords, which, due to its cyclic nature, can facilitate password prediction.
-
High 7.3
Use After Free in gpac/gpac
Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV.
-
High 7.8
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing …