Archive
6 June 2022
Vulnerabilities first published on this day (UTC), newest first.
103 results · Feed
-
Unscored —CVE-2022-29296 Public exploit
A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attac…
-
Unscored —
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
-
Unscored —CVE-2022-27438 Public exploit
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advance…
-
Unscored —
The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to …
-
Unscored —
SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. The "Remove file" functionality inside the "Log files …
-
Unscored —
SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS. An attacker with admin privileges can inject…
-
Unscored —
A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application d…
-
Medium 6.1
bypass of CVE-2021-25640
bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.
-
Critical 9.8
JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable
jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.
-
Medium 4.2
Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator in oauthenticator
OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log in to a JupyterHub via CILogon. This is primarily used to restrict a JupyterHub only to users of a gi…
-
High 7.5
DoS Vulnerability in URLEncodedFormDecoder in Vapor
Vapor is a server-side Swift HTTP web framework. When using automatic content decoding an attacker can craft a request body that can make the server crash with the following request: `curl -d "array[_0][0][array][_0][0][array]$(for f in $(seq 1100); do echo -…
-
Medium 5.9
Use of Uninitialized Variable in trilogy
Trilogy is a client library for MySQL. When authenticating, a malicious server could return a specially crafted authentication packet, causing the client to read and return up to 12 bytes of data from an uninitialized variable in stack memory. Users of the tr…
-
Unscored —
LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.
-
Unscored —
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman§ion=get&pag…
-
High 7.5
Server-Side Request Forgery in Jodd HTTP
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted …
-
Unscored —
Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php U…
-
High 8.2
Multiple evaluation of contract address in call in vyper
Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions prior to 0.3.4 when a calling an external contract with no return value, the contract address (including side effects) could be evaluated twice. This may result in incor…
-
Unscored —
Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure.
-
Medium 4.4
BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently e…
-
Unscored —
Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availabili…
-
Low 3.7
Failed payment recorded has completed in silverstripe/silverstripe-omnipay
silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like `isNotification()` or `isRedirect()`), if the payment identifier or success URL is exposed it is po…
-
Medium 4.3
Tracker report renderer and chart widgets leak information in Tuleap
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users c…
-
Critical 9.1
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in django-s3file
django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. If the `AWS_LOCATION` setting was set, traversal was limit…
-
Unscored —
Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution.
-
High 7.5
Grafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /.…
-
Unscored —
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.
-
Unscored —
In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of servi…
-
Unscored —
In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of servi…
-
Unscored —
In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of servi…
-
Unscored —
In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
Unscored —
In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege wi…
-
Unscored —
In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of se…
-
Unscored —
In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor…
-
Unscored —
In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor…
-
Unscored —
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local in…