Archive
18 August 2022
Vulnerabilities first published on this day (UTC), newest first.
130 results · Feed
-
High 7.8
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products b…
-
Medium 5.5
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user…
-
Medium 6.5
Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentia…
-
Low 3.3
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated …
-
High 7.5
Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to poten…
-
High 7.5
Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentia…
-
High 8.8
Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to pot…
-
Medium 4.4
Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable in…
-
Medium 6.7
Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable e…
-
Medium 5.5
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to p…
-
Medium 5.5
Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenti…
-
Medium 4.4
Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may allow a …
-
Medium 4.4
Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may allow a …
-
Medium 4.4
Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before v…
-
High 8.8
Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS
The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to …
-
Unscored —
libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.…
-
Unscored —
libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. Th…
-
Unscored —
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer.
-
Unscored —
Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a cross-site scripting (XSS) vulnerabili…
-
Unscored —
osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_d…
-
Unscored —
CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m=settings&a=show' via t…
-
Unscored —
A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user …
-
High —
oqs's Post-Quantum Signature scheme Rainbow level I parametersets broken
Ward Beullens found a practical key-recovery attack against Rainbow. The level I parametersets are removed from liboqs starting from version `0.7.2`. Find the scientific details in [Breaking Rainbow Takes a Weekend on a Laptop](https://eprint.iacr.org/2022/21…
-
Unscored —
An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp …
-
Medium —
oqs's Post-Quantum Key Encapsulation Mechanism SIKE broken
Wouter Castryck and Thomas Decru presented an efficient key recovery attack on the SIDH protocol. As a result, the secret key of SIKEp751 can be recovered in a matter of hours. The SIKE and SIDH schemes will be removed from oqs 0.7.2. [An efficient key recove…
-
Unscored —
A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp …
-
Medium —
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
### Impact The default landing page contained HTML to display a sample `curl` command which is made visible if the full landing page bundle could not be fetched from Apollo's CDN. The server's URL is directly interpolated into this command inside the browser …
-
Medium 5.2
Improper KubeConfig handling allows arbitrary code execution
The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to arbitrary code execution on behalf of the user running VSCode. Users relying on kubeconfigs that are generate…
-
Unscored —
A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted inpu…
-
High 8.6
Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.
-
High 7.5CVE-2022-37422 Public exploit
Path Traversal in Payara
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded.
-
Critical 9.0
Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode
The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users using the VSCod…
-
Unscored —
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at …
-
Medium 5.4
Cross site scripting in getkirby/starterkit
A stored cross-site scripting (XSS) vulnerability in Kirby's Starterkit v3.7.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Tags field.
-
Unscored —
All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) d…
-
Unscored —
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerabilit…
-
High 7.5
Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution
py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the `application.commands` scope without the `bot` scope. Currently, it appears that al…
-
Unscored —
An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local…
-
Unscored —
An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first ma…
-
Unscored —
An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe" output to the /var/log/qualys/qualys-clou…