Archive
2 September 2022
Vulnerabilities first published on this day (UTC), newest first.
77 results · Feed
-
Unscored —
Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/de…
-
High —
`os_socketaddr` invalidly assumes the memory layout of std::net::SocketAddr
The [`os_socketaddr`](https://crates.io/crates/os_socketaddr) crate has assumed `std::net::SocketAddrV4` and `std::net::SocketAddrV6` have the same memory layout as the system C representation `sockaddr`. It has simply casted the pointers to convert the socke…
-
Unscored —
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
-
Unscored —
PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at so…
-
Unscored —
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 al…
-
Unscored —
influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers…
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to e…
-
Unscored —
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to…
-
Medium 6.4
Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rules
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix specification specifies a list of [event authorization rules](https://spec.matrix.org/v1.2/rooms/v9/#authorization-rules) which must be checked when de…
-
High 7.6
Server-Side Request Forgery (SSRF) vulnerability in Databasir
Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sending a **single** HTTP POST request to create a databaseType. By supplying a `jdbcDriverFileUrl` that r…
-
Medium 4.3
PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)
This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The issue is fixed in version 5.0.2.
-
Medium 5.3
Improper Access Control in jgraph/drawio
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8.
-
Unscored —
Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the…
-
High 7.8
Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vul…
-
Medium 5.5
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative …
-
High 8.1
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotec…
-
High 8.1
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an inserti…
-
High 8.3
Recovery codes abuse in SFTPGo
SFTPGo is configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. SFTPGo WebAdmin and WebClient support login using TOTP (Time-based One Time Passwords) as a secondary authentication factor. Because TOTPs are often configured on mobile device…
-
High 8.8
Account takeover via SSO plugins in NodeBB
NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added (and later checked) …
-
High 8.8
Slice Memory Allocation with Excessive Size Value in binary
Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with (arbitrary) excessive size value, which can either exhaust available memory or crash t…
-
High 7.3
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Sna…
-
High 8.4
Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto
-
High 7.3
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdrago…
-
High 7.3
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function…
-
High 7.3
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snap…
-
High 8.4
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto
-
Medium 6.2
Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapd…
-
High 8.4
Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdrago…
-
High 8.4
Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snap…
-
Critical 9.8
Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length p…
-
High 8.4
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon C…
-
High 7.8
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, S…
-
High 7.7
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snap…
-
High 7.5
Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Sna…
-
High 8.2
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Sna…
-
High 7.8
Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Sn…