Archive
26 July 2022
Vulnerabilities first published on this day (UTC), newest first.
115 results · Feed
-
Unscored —
Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user…
-
Unscored —
Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit …
-
Unscored —
Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit…
KEV Apr 15, 2022 -
Unscored —
The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic aut…
-
Unscored —
The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cry…
-
Unscored —
In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored i…
-
Unscored —
Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection…
-
Unscored —
The Motorola MOSCAD Toolbox software through 2022-05-02 relies on a cleartext password. It utilizes an MDLC driver to c…
-
Unscored —
The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Le…
-
Unscored —
The Emerson DeltaV Distributed Control System (DCS) through 2022-04-29 mishandles authentication. It utilizes several p…
-
Unscored —
Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bri…
-
Unscored —
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP h…
-
Unscored —
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNE…
-
Unscored —
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. WIOC …
-
Unscored —
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Acces…
-
Unscored —
InMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX Connection names are not sanitz…
-
Critical 9.1
JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol (configurable on …
-
Unscored —
JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the unauthenticated CMPLink/TCP protoc…
-
Unscored —
A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the A…
-
Unscored —
A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw …
-
High 7.5
IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could ca…
-
Low 3.1
IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker …
-
Medium 4.2
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the local host (client mach…
-
Medium 5.7
Relative Path Traversal to Remote Code Execution in File Manager
Pandora FMS v7.0NG.760 and below allows a relative path traversal in File Manager where a privileged user could upload a .php file outside the intended images directory which is restricted to execute the .php file. The impact could lead to a Remote Code Execu…
-
Unscored —
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API …
-
Unscored —
Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the compo…
-
Unscored —
Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_nam…
-
Unscored —
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_passw…
-
Unscored —
Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
-
Unscored —
Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter.
-
Unscored —
Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter.
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c.
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a use-after-free in expr_traverse_nodes_post() in libyasm/expr.…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr__copy_except() in libya…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in modules/preprocs/nasm/…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/prepro…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_smacro() in modules/prepro…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a use-after-free in pp_getline() in modules/preprocs/nasm/nasm-…