Archive
1 September 2022
Vulnerabilities first published on this day (UTC), newest first.
70 results · Feed
-
Medium 5.4
WordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Simon Ward MP3 jPlayer plugin <= 2.7.3 at WordPress.
-
Medium 5.4
WordPress Easy Org Chart plugin <= 3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Easy Org Chart plugin <= 3.1 at WordPress.
-
Medium 6.5
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, wher…
-
High 8.8
Apache ShenYu Admin Improper Privilege Management
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3.
-
Unscored —
Weave GitOps Enterprise before 0.9.0-rc.5 has a cross-site scripting (XSS) bug allowing a malicious user to inject a ja…
-
Medium 6.5
Denial of service in Helm
Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the _strvals_ package that can cause an out of memory panic. The _strvals_ package contains a …
-
Medium 6.8
Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system (file os/net/ipv6/sicslowpan.c) contains an input function that processes incoming packets and copies …
-
Medium 5.9
Out-of-bounds read when decompressing UDP header
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UDP header structure at a certain offset in a packet buffer. The code does not check whether the packet buffer i…
-
Medium 5.9
Out-of-bounds read in the uIP buffer module
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a buffer module (os/net/ipv6/uipbuf.c) that processes IPv6 extension headers in incoming data packets. As part of…
-
High 8.0
Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3.
-
Unscored —
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing opera…
-
Unscored —
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /cat…
-
Unscored —
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sch…
-
Unscored —
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sch…
-
Unscored —
Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability…
-
Unscored —
Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download A…
-
Unscored —
HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated …
-
Unscored —
In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
-
Unscored —
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
-
Unscored —
An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate expl…
-
Unscored —
A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain…
-
Unscored —
In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.
-
Unscored —
Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged…
-
Unscored —
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() i…
-
Unscored —
A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests.…
-
Unscored —
A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due…
-
Unscored —
A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for…
-
High 7.4
python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
-
Unscored —
An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly m…
-
Unscored —
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cau…