Archive
July 2022
Vulnerabilities first published in this month (UTC), newest first.
1,993 results · Feed
-
Unscored —
Unsafe HTML Injection in Artifact Collection Report
A cross-site scripting (XSS) issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. This issue was resolved in Velociraptor 0.6.5-2.
-
Unscored —
Velociraptor Client ID Spoofing
Due to a bug in the handling of the communication between the client and server, it was possible for one client, already registered with their own client ID, to send messages to the server claiming to come from another client ID. This issue was resolved in Ve…
-
Low 3.5
SourceCodester Garage Management System createUser.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0. Affected is an unknown function of the file /php_action/createUser.php. The manipulation of the argument userName with the input lala<img src="" on…
-
Medium 6.3
SourceCodester Garage Management System createUser.php access control
A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /php_action/createUser.php. The manipulation leads to improper access controls. The attack…
-
Medium 6.3
SourceCodester Garage Management System edituser.php sql injection
A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument id with the input -2'%20UNION%20select%2011,user(),333,444--+ …
-
Unscored —
Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulner…
-
Unscored —
An attacker can force the victim’s device to perform arbitrary HTTP requests in WAN through a malicious SVG file being …
-
Critical 9.1
IBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a denial of service. IB…
-
Unscored —
The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen P…
-
High 7.5
Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch
In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest. Especially, if used with certificate based cipher suites, that results in…
-
Critical 9.4
SQL Injection in Inavitas Solar Log
Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.
-
High 7.5
Timing Attack
The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in the webhook event validator code, which does not use a constant-time comparison function to validate the webhook secret. It can allow an att…
-
Medium 5.7
Incorrect signature verification on Google play-services-basement in Google Play SDK
Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release.
-
Unscored —
A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers…
-
Unscored —CVE-2022-34555 EPSS 23%
TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is…
-
Unscored —CVE-2022-36752 Public exploit
png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitabl…
-
Unscored —CVE-2022-36234 Public exploit
SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulner…
-
Unscored —CVE-2022-34556 Public exploit
PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c.
-
Unscored —
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at …
-
Critical 9.8
WMAgent arbitrary code execution via a crafted dbs-client package
WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package.
-
High 7.4
IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unkn…
-
Unscored —
Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap …
-
Unscored —
Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface.
-
Unscored —
Advanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the add…
-
Unscored —CVE-2022-30287 EPSS 69%
Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can insta…
-
Critical 10.0
sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that c…
-
Unscored —
DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability.
-
Unscored —
Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Brandi…
-
Unscored —
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
-
Unscored —
WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, incl…
-
Unscored —
Input passed to the Pdf() function is shell escaped and passed to child_process.exec() during PDF rendering. However, t…
-
Unscored —
In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.
-
Unscored —
In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.
-
Unscored —
Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is …
-
Unscored —
Saia Burgess Controls (SBC) PCD through 2022-05-06 uses a Broken or Risky Cryptographic Algorithm. According to FSCT-20…
-
Unscored —
Honeywell Experion PKS Safety Manager through 2022-05-06 has Missing Authentication for a Critical Function. According …
-
Unscored —
Honeywell Experion PKS Safety Manager 5.02 uses Hard-coded Credentials. According to FSCT-2022-0052, there is a Honeywe…
-
Unscored —
Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient Verification of Data Authenticit…
-
Unscored —
Honeywell Experion PKS Safety Manager 5.02 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0…
-
High 7.0CVE-2022-2564 EPSS 31%
Prototype Pollution in automattic/mongoose
Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6.