Archive
July 2022
Vulnerabilities first published in this month (UTC), newest first.
1,993 results · Feed
-
Medium 4.8
Jenkins Git client plugin 3.11.0 does not perform SSH host key verification
Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks.
-
Unscored —
OX App Suite through 7.10.6 allows SSRF because multipart/form-data boundaries are predictable, and this can lead to in…
-
Unscored —
OX App Suite through 7.10.6 allows OS Command Injection via a serialized Java class to the Documentconverter API.
-
Unscored —
OX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message.
-
High 8.1
Privilege escalation vulnerability in SAP SuccessFactors attachment API for Mobile Application(Android & iOS)
Due to misconfigured application endpoints, SAP SuccessFactors attachment APIs allow attackers with user privileges to perform activities with admin privileges over the network. These APIs were consumed in the SF Mobile application for Time Off, Time Sheet, E…
-
High 7.2
WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability
Authenticated WordPress Options Change vulnerability in Biplob018 Shortcode Addons plugin <= 3.1.2 at WordPress.
-
Unscored —
OX App Suite through 7.10.6 allows XSS by forcing block-wise read.
-
Unscored —
OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).
-
Unscored —
Sims v1.0 was discovered to allow path traversal when downloading attachments.
-
Unscored —
Sims v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /addNotifyServlet. Thi…
-
Unscored —
Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulne…
-
Medium 5.5
WASM3 segmentation fault
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill.
-
High 8.2
DLL high jacking in Trellix Agent
A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is bein…
-
Critical 10.0
Skyhigh SWG Authentication bypass vulnerability
An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authentication into the administration User …
-
Medium 6.5
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…
-
Unscored —
The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message.
-
Medium 5.5
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a…
-
Unscored —
Advanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the com…
-
Unscored —
A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attacker…
-
High 8.8
Feehi CMS arbitrary code execution via crafted PHP file
An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.
-
Unscored —
Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerabi…
-
High 7.5CVE-2022-36946 Public exploit
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a …
-
Unscored —
The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g., android.permission.ACC…
-
Unscored —
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's add…
-
Unscored —
HashiCorp Vault Enterprise 1.7.0 through 1.9.7, 1.10.4, and 1.11.0 clusters using Integrated Storage expose an unauthen…
-
Unscored —
The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 omit an authentication requirement. They feature IP Gateway…
-
Unscored —
Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installatio…
-
Unscored —
The Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface on port 22/TCP. This i…
-
Critical 9.8
The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and initialization scripts (such as …
-
Unscored —
The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the STS software suite or…
-
Unscored —
The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with an XRT LAN-to-radio g…
-
Unscored —
Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who…
-
Unscored —
Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to eng…
-
Unscored —
Use after free in ANGLE in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to po…
-
Unscored —
Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to leak …
-
Unscored —
Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exp…
-
Unscored —
Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a …
-
Unscored —
Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had convinced a user…
-
Unscored —
Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinc…