Archive
2 August 2022
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —
An issue was discovered in the Arm Mali GPU Kernel Driver (Valhall r29p0 through r38p0). A non-privileged user can make…
-
Unscored —
In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to …
-
Unscored —
In Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS) vulnerabilities exist i…
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in Mealie v0.5.5 allows attackers to execute arbitrary web scripts or…
-
Unscored —
A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow f…
-
Unscored —
In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. This…
-
Unscored —
In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linki…
-
Medium 5.3
Missing rate limit in Authentication in bookwyrm
BookWyrm is a social network for tracking reading. Versions prior to 0.4.5 were found to lack rate limiting on authentication views which allows brute-force attacks. This issue has been patched in version 0.4.5. Admins with existing instances will need to upd…
-
High 7.5
Inefficient Regular Expression Complexity in v8n
v8n is a javascript validation library. Versions of v8n prior to 1.5.1 were found to have an inefficient regular expression complexity in the `lowercase()` and `uppercase()` regex which could lead to a denial of service attack. In testing of the `lowercase()`…
-
Unscored —
Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnera…
-
Critical 9.1
Verification requests (magic link) sent to unwanted emails
NextAuth.js is a complete open source authentication solution for Next.js applications. `next-auth` users who are using the `EmailProvider` either in versions before `4.10.3` or `3.29.10` are affected. If an attacker could forge a request that sent a comma-se…
-
Medium 6.5
TIBCO iWay Service Manager Directory Traversal Vulnerability
The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploitable Directory Traversal vulnerability that allows a low privileged attacker with network access to read arbitrary resources on the affect…
-
High 8.1
TIBCO iWay Service Manager Reflected Cross Site Scripting (XSS) Vulnerability
The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeti…
-
Critical 9.8
Improper Access Control in tooljet/tooljet
Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0.
-
Unscored —
Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes
A stored XSS vulnerability was identified in GitHub Enterprise Server that allowed the injection of arbitrary attributes. This injection was blocked by Github's Content Security Policy (CSP). This vulnerability affected all versions of GitHub Enterprise Serve…
-
Medium 5.7
XSS vulnerability in Citadel
The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.
-
Critical 9.8
EasyUse MailHunter Ultimate - Deserialization of Untrusted Data
EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote attacker…
-
Medium 6.8
HiCOS Citizen verification component - Stack Buffer Overflow
HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or d…
-
Medium 5.4
TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-2
Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate to…
-
High 7.7
TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-1
Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user privilege posting a thread with large content can cause the receiving client device to allocate too much…
-
Medium 5.5
NHI card’s web service component - Stack-based Buffer Overflow-2
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
-
Medium 5.5
NHI card’s web service component - Heap-based Buffer Overflow
The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
-
Unscored —
Mealie1.0.0beta3 was discovered to contain a Server-Side Template Injection vulnerability, which allows attackers to ex…
-
Unscored —
Mealie 1.0.0beta3 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via …
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in Mealie 1.0.0beta3 allows attackers to execute arbitrary web script…
-
Unscored —CVE-2022-29154 Public exploit
An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the …
-
High 7.5
NULL Pointer Dereference
The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.
-
Critical 9.8
Command Injection
This affects all versions of package monorepo-build.
-
High 7.2
-
High 7.3
-
High 7.3
Command Injection
This affects all versions of package node-latex-pdf.
-
High 7.3
Command Injection
The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js.
-
Critical 9.4
Command Injection
This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js.
-
Critical 9.4
Command Injection
This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.
-
Critical 9.8
-
Critical 9.4
Command Injection
This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js.
-
Medium 5.4
Open Redirect
This affects all versions of package Flask-Security. When using the get_post_logout_redirect and get_post_login_redirect functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\\e…
-
High 7.8
NHI card’s web service component - Stack-based Buffer Overflow-1
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary…
-
Unscored —
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname p…
-
Unscored —
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load…