Archive
14 June 2022
Vulnerabilities first published on this day (UTC), newest first.
38 results · Clear filters · Feed
-
Medium 5.9
Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users
EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, m…
-
Medium 6.0
Insufficient Session Expiration in TYPO3 Admin Tool
TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool sessions initiated via the TYPO3 backend user interface had not been revoked even if the corresponding user account was degraded to lower pe…
-
Medium 5.4
Cross-Site Scripting in Form Framework
TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to …
-
Medium 5.4
Cross-Site Scripting in Frontend Login Mailer
TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user submitted content was used without being properly encoded in HTML emails sent to users. The actually affected components were mail clients used to…
-
Medium 4.3
Information Disclosure via Export Module in TYPO3 CMS
TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the export functionality fails to limit the result set to allowed columns of a particular database table. This way, authentic…
-
Medium 5.3
Insertion of Sensitive Information into Log File in typo3/cms-core
TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, system internal credentials or keys (e.g. database credentials) can be logged as plaintext in exception handlers, when loggin…
-
Medium 5.3
Banner topic data is exposed on login-required Discourse sites
Discourse is an open-source discussion platform. Prior to version 2.8.4 in the `stable` branch and version `2.9.0.beta5` in the `beta` and `tests-passed` branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in…
-
Medium 6.5
Discourse Calendar Event names susceptible to Cross-site Scripting
Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Prior to version 1.0.1, parsing and rendering of Event names can be susceptible to cross-site scripting (XSS) attacks. This vulnerability only affects sites which have modifi…
-
Medium 4.3
Forced Browsing in Jupyter Notebook
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only prevented listing the contents of hidden directories, not a…
-
Medium 5.5
The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error t…
-
Medium 5.3
The Foundry Multipass service contains code paths that could be abused to cause a denial of service for authentication and authorization operations.
The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization operations. A malicious attacker could perform an application-level denial of service attack, potentially causing authenti…
-
Medium 5.5
Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead t…
-
Medium 6.5
RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclos…
-
Medium 6.5
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapd…
-
Medium 6.5
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapd…
-
Medium 6.5
Incorrect Authorization in thinkcmf
thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority i…
-
Medium 6.7
Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon C…
-
Medium 6.7
Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modificatio…
-
Medium 5.5
Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Sna…
-
Medium 5.5
Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon C…
-
Medium 6.5
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon I…
-
Medium 6.2
Improper validation of permissions for third party application accessing Telephony service API can lead to information …
-
Medium 6.7
An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx d…
-
Medium 6.7
Improper handling between export and release functions on the same handle from client can lead to use after free in Sna…
-
Medium 5.5
Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Sna…
-
Medium 6.7
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Co…
-
Medium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application con…
-
Medium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application…
-
Medium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for instal…
-
Medium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application con…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application con…
-
Medium 5.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application con…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST reque…
-
Medium 4.9
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input valida…
-
Medium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not per…
-
Medium 4.9
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discl…
-
Medium 6.1CVE-2022-29034 EPSS 29%
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up wind…
-
Medium 5.9
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-th…