Archive
13 July 2022
Vulnerabilities first published on this day (UTC), newest first.
54 results · Feed
-
Unscored —
kvf-admin through 2022-02-12 allows remote attackers to execute arbitrary code because deserialization is mishandled. T…
-
Medium 5.5
A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware …
-
Medium 5.9
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…
-
Medium 5.9
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized…
-
Medium 5.9
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…
-
High 7.5
A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when par…
-
High 7.5
A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of ser…
-
High 7.5
A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improp…
-
Medium 5.1
A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled i…
-
Medium 6.7
A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used f…
-
High 8.8
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution o…
-
Medium 6.8
A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing cre…
-
High 8.8
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exis…
-
Unscored —
Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryx_print_unhandled_exception …
-
Medium 6.5
Insufficient AccessToken Expiration Check in FlyteAdmin
FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after…
-
Unscored —
Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitr…
-
Unscored —
File upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to run arbitrary code vi…
-
Medium 5.5
The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() fu…
-
Unscored —
In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity,…
-
Unscored —
In wifi.RequestToggleWifiActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. T…
-
Unscored —
'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->…
-
Unscored —
A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-23…
-
Unscored —
In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input v…
-
Unscored —CVE-2022-20229 Public exploit
In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing…
-
Unscored —
In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This coul…
-
Unscored —
In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informati…
-
Unscored —
In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. T…
-
Unscored —
In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a …
-
Unscored —CVE-2022-20224 Public exploit
In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Unscored —CVE-2022-20223 Public exploit
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call witho…
-
Unscored —
In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lea…
-
Unscored —
In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validatio…
-
Unscored —
In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could le…
-
Unscored —
In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user'…
-
Unscored —
In PermissionController, there is a possible way to get and retain permissions without user's consent due to a logic er…
-
Unscored —
There is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this issue to delete Fdn con…
-
Unscored —
android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com…
-
Unscored —
The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access t…
-
High 7.3
KB Messages PHP Script sql injection
A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack c…
-
High 7.3
KB Login Authentication Script sql injection
A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may …