Archive
11 August 2022
Vulnerabilities first published on this day (UTC), newest first.
211 results · Feed
-
Unscored —
In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called extra, title, and onl…
-
Unscored —
An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. When using preauth…
-
Critical 9.8
Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts f…
KEV Aug 11, 2022 -
Unscored —
An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. …
-
High —
django-sendfile2 before 0.7.0 contains reflected file download vulnerability
Similar to CVE-2022-36359 for Django, django-sendfile2 did not protect against a reflected file download attack in version 0.6.1 and earlier. If the file name used by django-sendfile2 was derived from user input, then it would be possible to perform a such an…
-
Medium —
`temporary` makes use of uninitialized memory
Uninitialized memory is used as a RNG seed in temporary. This has been resolved in the 0.6.4 release. The crate is not intended to be used outside of a testing environment. For a general purpose crate to create temporary directories, [`tempfile`](https://crat…
-
High 8.2
Cronos vulnerable to DoS through unintended Contract Selfdestruct
In Cronos nodes running versions before v0.7.0, the contract selfdestruct invocation permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in Ethermint, all contracts that used the identical bytecode (i.e sha…
-
Medium —
mofh Vulnerable to Improper Restriction of XML External Entity Reference
The `xml.etree.ElementTree` module that mofh used up until version `1.0.1` implements a simple and efficient API for parsing and creating XML data. But it makes the application vulnerable to: - [Billion Laughs attack](https://en.wikipedia.org/wiki/Billion_lau…
-
Unscored —
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s…
-
Unscored —
A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in…
-
Unscored —
A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process…
-
Unscored —
A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process…
-
Unscored —
A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discov…
-
Unscored —
A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discov…
-
Unscored —
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s…
-
Unscored —
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s…
-
Unscored —
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s…
-
Unscored —
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s…
-
Unscored —
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s…
-
Unscored —
A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be expl…
-
Unscored —
A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited…
-
Unscored —CVE-2022-35559 EPSS 12%
A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to co…
-
Unscored —
A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be expl…
-
Unscored —
A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited…
-
Unscored —CVE-2022-35555 EPSS 40%
A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to co…
-
Unscored —
In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is stored in the HTML sourc…
-
High —
`rustdecimal` is a malicious crate
The Rust Security Response WG and the crates.io team [were notified][1] on 2022-05-02 of the existence of the malicious crate `rustdecimal`, which contained malware. The crate name was intentionally similar to the name of the popular [`rust_decimal`][2] crate…
-
High —
tower-http's improper validation of Windows paths could lead to directory traversal attack
`tower_http::services::fs::ServeDir` didn't correctly validate Windows paths, meaning paths like `/foo/bar/c:/windows/web/screen/img101.png` would be allowed and respond with the contents of `c:/windows/web/screen/img101.png`. Thus users could potentially rea…
-
Unscored —
In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execut…
-
Unscored —
In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could l…
-
Unscored —
In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could…
-
Unscored —
In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing…
-
Unscored —
In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration.…
-
Unscored —
In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to…
-
Unscored —
In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a mis…
-
Unscored —
In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial …
-
Unscored —
In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with n…
-
Unscored —
In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to …
-
Unscored —
In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay att…
-
Unscored —
In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missin…