Archive
2 September 2022
Vulnerabilities first published on this day (UTC), newest first.
36 results · Clear filters · Feed
-
High —
`os_socketaddr` invalidly assumes the memory layout of std::net::SocketAddr
The [`os_socketaddr`](https://crates.io/crates/os_socketaddr) crate has assumed `std::net::SocketAddrV4` and `std::net::SocketAddrV6` have the same memory layout as the system C representation `sockaddr`. It has simply casted the pointers to convert the socke…
-
High 7.6
Server-Side Request Forgery (SSRF) vulnerability in Databasir
Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sending a **single** HTTP POST request to create a databaseType. By supplying a `jdbcDriverFileUrl` that r…
-
High 7.8
Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vul…
-
High 8.1
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotec…
-
High 8.1
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an inserti…
-
High 8.3
Recovery codes abuse in SFTPGo
SFTPGo is configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. SFTPGo WebAdmin and WebClient support login using TOTP (Time-based One Time Passwords) as a secondary authentication factor. Because TOTPs are often configured on mobile device…
-
High 8.8
Account takeover via SSO plugins in NodeBB
NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added (and later checked) …
-
High 8.8
Slice Memory Allocation with Excessive Size Value in binary
Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with (arbitrary) excessive size value, which can either exhaust available memory or crash t…
-
High 7.3
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Sna…
-
High 8.4
Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto
-
High 7.3
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdrago…
-
High 7.3
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function…
-
High 7.3
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snap…
-
High 8.4
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdrago…
-
High 8.4
Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snap…
-
High 8.4
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon C…
-
High 7.8
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, S…
-
High 7.7
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snap…
-
High 7.5
Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Sna…
-
High 8.2
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Sna…
-
High 7.8
Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Sn…
-
High 8.4
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdrago…
-
High 8.4
Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to mem…
-
High 8.4
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon C…
-
High 7.3
Possible authentication bypass due to improper order of signature verification and hashing in the signature verificatio…
-
High 7.3
Possible authentication bypass due to improper order of signature verification and hashing in the signature verificatio…
-
High 7.8
Avaya IP Office Privilege Escalation Vulnerability
A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier vers…
-
High 8.8
BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capa…
-
High 8.8
BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c …
-
High 7.8
An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromi…
-
High 8.3
Grafana Image Renderer leaking files
Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs using a headless browser (Chromium/Chrome). An internal security review identified an unauthorized file disclosure vulnerability. It is possible for a mal…