Archive
June 2022
Vulnerabilities first published in this month (UTC), newest first.
2,191 results · Feed
-
High 7.5
Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events
Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sen…
-
Critical 9.8
Signature forgery in Biscuit
Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to creat…
-
Unscored —
There is an improper authentication vulnerability in FLMG-10 10.0.1.0(H100SP22C00). Successful exploitation of this vul…
-
Unscored —
There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability m…
-
Unscored —
There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause …
-
Unscored —
The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in …
-
Unscored —
A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated user…
-
Unscored —
A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: po…
-
Critical 9.8
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypa…
-
Critical 9.8
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions set…
-
Medium 5.9
Amodat - Mobile Application Gateway SQL Injection (SQLi)
attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel.
-
Medium 5.9
Amodat - Mobile Application Gateway SQL Injection (SQLi)
The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--
-
Medium 5.3
Amodat - Mobile Application Gateway Local File Inclusion (LFI)
Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED.
-
Medium 4.7
WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability
DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.
-
Unscored —
Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untru…
-
High 7.5
Improper Access Control in kctf
kCTF is a Kubernetes-based infrastructure for capture the flag (CTF) competitions. Prior to version 1.6.0, the kctf cluster set-src-ip-ranges was broken and allowed traffic from any IP. The problem has been patched in v1.6.0. As a workaround, those who want t…
-
Unscored —
Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect…
-
Unscored —
Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentialit…
-
Unscored —
Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of th…
-
Unscored —
Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the a…
-
Unscored —
HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause di…
-
Unscored —
The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of t…
-
Unscored —
The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affec…
-
Unscored —
The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may a…
-
Unscored —
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploi…
-
Unscored —
The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privile…
-
Unscored —
AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affe…
-
Unscored —
The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulne…
-
Unscored —
The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confide…
-
Unscored —
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system av…
-
Unscored —
The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data c…
-
Unscored —
The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnera…
-
Unscored —
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability…
-
Critical 9.8
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access …
-
Critical 9.8
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access …
-
Critical 9.8
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper …
-
Critical 9.8
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper a…
-
High 7.5
npm packing does not respect root-level ignore files in workspaces
npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag (ie. `--workspaces`, `--workspace=<name>`). Anyone who has run `npm pack` or `npm publish` inside a workspace, as of v7.9.0 and v7…
-
Unscored —
Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection.
-
Medium 5.5
Sticky Popup <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
The Sticky Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ popup_title' parameter in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta…