Archive
June 2022
Vulnerabilities first published in this month (UTC), newest first.
428 results · Clear filters · Feed
-
High 7.7
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there …
-
High 7.5
Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdrag…
-
High 7.8
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS …
-
High 7.5
Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Ind…
-
High 7.5
Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Sna…
-
High 7.5
Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in S…
-
High 7.5
Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Au…
-
High 7.5
Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdra…
-
High 7.8
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon…
-
High 7.8
Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto
-
High 8.4
Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snap…
-
High 7.3
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdr…
-
High 7.3
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, S…
-
High 8.4
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Sn…
-
High 8.4
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Com…
-
High 7.5
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Comput…
-
High 8.4
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon A…
-
High 8.4
Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto
-
High 7.5
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectiv…
-
High 7.8
Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapd…
-
High 7.1
Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto,…
-
High 8.2
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdrago…
-
High 8.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application con…
-
High 8.8
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). There is a missing authentic…
-
High 7.8
A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designe…
-
High 7.2
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does …
-
High 8.8
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not…
-
High 7.3
Cross-site Scripting (XSS) - Stored in nocodb/nocodb
Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+.
-
High —
Apache Flume vulnerable to a JNDI RCE in JMSSource
Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JN…
-
High 8.1
Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation
In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface (CLI) did not validate TLS certificates while connecting to a remote Splunk platform instance by default. After updating to version 9.0, see Configure TLS host…
-
High 8.4CVE-2022-22057 Public exploit
Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timel…
-
High 7.5
Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events
Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sen…
-
High 7.5
Improper Access Control in kctf
kCTF is a Kubernetes-based infrastructure for capture the flag (CTF) competitions. Prior to version 1.6.0, the kctf cluster set-src-ip-ranges was broken and allowed traffic from any IP. The problem has been patched in v1.6.0. As a workaround, those who want t…
-
High 7.5
npm packing does not respect root-level ignore files in workspaces
npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag (ie. `--workspaces`, `--workspace=<name>`). Anyone who has run `npm pack` or `npm publish` inside a workspace, as of v7.9.0 and v7…
-
High 8.8
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abb_uninstall_template" (both) and "jupiterx_core_cp_uninstall_template" …
-
High 8.8
Mobile browser color select <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Mobile browser color select plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the admin_update_data() function. This makes it possible for unau…
-
High 8.8
WPMK Ajax Finder <= 1.0.1 - Cross-Site Request Forgery to Cross-Site Scripting
The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting_page() function found in the ~/inc/config/create-plugin-config.php file due to a missing nonce check which allows attackers to inject arbi…
-
High 8.8
JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion
Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterx_cp_load_pane_action AJAX action pres…
-
High 8.8
Copify <= 1.3.0 - Cross-Site Request Forgery to Cross-Site Scripting
The Copify plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.0. This is due to missing nonce validation on the CopifySettings page. This makes it possible for unauthenticated attackers to update the plugins…
-
High 8.8
ToolBar to Share <= 2.0 - Cross-Site Request Forgery to Cross-Site Scripting
The ToolBar to Share plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0. This is due to missing nonce validation on the plugin_toolbar_comparte page. This makes it possible for unauthenticated attackers to u…