Archive
August 2022
Vulnerabilities first published in this month (UTC), newest first.
2,333 results · Feed
-
Medium 5.3
Cache poisoning via maliciously-formed request in Discourse
Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static assets could cause error responses to be cached by Discourse's default NGINX proxy configuration. A corrected NGINX configuration is included in…
-
Critical 9.8
Remote code execution in prestashop
PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7.…
-
Low 3.3
Leakage of excessive information into log in next-auth
NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in `next-auth` before `v4.10.2` and `v3.29.9` allows an attacker with log access privilege to obtain excessive information such as …
-
Medium 5.3
Email addresses are not hidden regardless of selected state in mprweb
mprweb is a hosting platform for the makedeb Package Repository. Email addresses were found to not have been hidden, even if a user had clicked the `Hide Email Address` checkbox on their account page, or during signup. This could lead to an account's email be…
-
Unscored —
PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.
-
Unscored —
An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames …
-
Unscored —
The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform…
-
High 8.1
Insufficient escaping of line feeds for CMD in shescape
Shescape is a simple shell escape package for JavaScript. Versions prior to 1.5.8 were found to be subject to code injection on windows. This impacts users that use Shescape (any API function) to escape arguments for cmd.exe on Windows An attacker can omit al…
-
Critical 9.8
Insufficient escaping of whitespace in shescape
Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolating output. This issue only impacts users that use the `escape` or `escapeAll` functions with the `interpolation…
-
Medium 4.3
Improper Authorization in eLabFTW
eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. Th…
-
Low 2.7
Possible to infer sensitive information through query strings in Flask-AppBuilder
Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hashed passwords strings. These filters could be made by using …
-
High 7.5
Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow
Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should li…
-
Medium 4.3
Unauthorized overwriting of saved searches in Sourcegraph
Sourcegraph is an opensource code search and navigation engine. In Sourcegraph versions before 3.41.0, it is possible for an attacker to delete other users’ saved searches due to a bug in the authorization check. The vulnerability does not allow the reading o…
-
Medium 6.4
Indirect Object Access in Sourcegraph Code Monitoring
Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to edit the Code Monitors owned by any other Sourcegraph user. This includes being able to edit both the trigger and the action of the monitor…
-
Medium 5.4
Persistent cross site scripting in customer module in Shopware
Shopware is an open source e-commerce software. In versions from 5.7.0 a persistent cross site scripting (XSS) vulnerability exists in the customer module. Users are recommend to update to the current version 5.7.14. You can get the update to 5.7.14 regularly…
-
Medium 5.4
Fine grained permissions are not checked in Tuleap
Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions Tuleap does not properly verify permissions when creating branches with the REST API in Git repositories using the fine grained permiss…
-
High 7.2
HTTP Host Header Attack Vulnerability in laminas-diactoros
laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces. Applications that use Diactoros, and are either not behind a proxy, or can be accessed via untrusted proxies, can po…
-
Medium 4.3
IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to…
-
Medium 5.9
IBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper input validation. IBM …
-
Medium 5.4
IBM CICS TX 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. Th…
-
Medium 5.4
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to v…
-
Medium 4.3
IBM CICS TX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and una…
-
Medium 4.3
IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and …
-
Unscored —
Novel "ghost domain names" attack by updating almost expired delegation information
NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation informati…
-
Unscored —
Novel "ghost domain names" attack by introducing subdomain delegations
NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver …
-
Medium 5.9
Inefficient Regular Expression Complexity in node-fetch/node-fetch
Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.
-
Critical 9.8
Improper Authorization in kromitgmbh/titra
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.
-
High 7.8
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.
-
High 7.3
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
-
Medium 6.9
Cross-site Scripting (XSS) - Reflected in beancount/fava
Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.
-
High 8.8
File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the fi…
-
Critical 9.8
BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-f…
-
Unscored —
An issue in \Roaming\Mango\Plugins of University of Texas Multi-image Analysis GUI (Mango) 4.1 allows attackers to esca…
-
High 7.5
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification o…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…