Archive
5 August 2022
Vulnerabilities first published on this day (UTC), newest first.
73 results · Clear filters · Feed
-
Medium 6.2
PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers…
-
Medium 6.2
Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to…
-
Medium 6.2
Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to ge…
-
Medium 6.2
Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to g…
-
Medium 4.0
Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive inf…
-
Medium 4.0
A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content prov…
-
Medium 4.4
A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read …
-
Medium 6.2
Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some…
-
Medium 4.0
Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connect…
-
Medium 5.9
Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC …
-
Medium 4.8
A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the u…
-
Medium 4.8
A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the use…
-
Medium 4.3
An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions …
-
Medium 4.4
A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15…
-
Medium 5.9
An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, a…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befo…
-
Medium 6.4
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befo…
-
Medium 6.4
An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4,…
-
Medium 4.9
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befo…
-
Medium 6.2
Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15…
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 1…
-
Medium 6.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions star…
-
Medium 5.3
An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions startin…
-
Medium 6.4
WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change
Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin (free) should be at least installed to get the extra input field on …
-
Medium 5.4
WordPress Rich Reviews by Starfish plugin <= 1.9.14 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Rich Reviews by Starfish plugin <= 1.9.14 at WordPress allows an attacker to delete reviews.
-
Medium 6.3
WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key.
-
Medium 6.5
WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability
Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin <= 0.2.27 at WordPress allows unauthenticated post update/create/delete.
-
Medium 5.0
WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities
Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.
-
Medium 6.3
Rigatur Online Booking and Hotel Management System POST Request login.php sql injection
A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Request Handler. The manipulation…
-
Medium 6.3
SourceCodester Garage Management System createUser.php sql injection
A vulnerability was found in SourceCodester Garage Management System. It has been classified as critical. Affected is an unknown function of the file createUser.php. The manipulation of the argument userName/uemail leads to sql injection. It is possible to la…
-
Medium 6.3
SourceCodester Garage Management System removeUser.php sql injection
A vulnerability was found in SourceCodester Garage Management System and classified as critical. This issue affects some unknown processing of the file removeUser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated rem…
-
Medium 6.3
SourceCodester Loan Management System delete_lplan.php sql injection
A vulnerability was found in SourceCodester Loan Management System and classified as critical. This issue affects some unknown processing of the file delete_lplan.php. The manipulation of the argument lplan_id leads to sql injection. The attack may be initiat…
-
Medium 6.3
SourceCodester Simple E-Learning System classroom.php sql injection
A vulnerability classified as critical was found in SourceCodester Simple E-Learning System. Affected by this vulnerability is an unknown functionality of the file classroom.php. The manipulation of the argument post_id leads to sql injection. The attack can …