Archive
2 September 2022
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
Medium 6.4
Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rules
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix specification specifies a list of [event authorization rules](https://spec.matrix.org/v1.2/rooms/v9/#authorization-rules) which must be checked when de…
-
Medium 4.3
PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)
This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The issue is fixed in version 5.0.2.
-
Medium 5.3
Improper Access Control in jgraph/drawio
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8.
-
Medium 5.5
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative …
-
Medium 6.2
Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapd…
-
Medium 6.2
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdrag…
-
Medium 6.7
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release cal…
-
Medium 6.8
Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges i…
-
Medium 6.8
Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read an…
-
Medium 4.7
Overly permissive umask for daemons
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users …