Archive
2 September 2022
Vulnerabilities first published on this day (UTC), newest first.
77 results · Feed
-
High 8.4
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdrago…
-
Medium 6.2
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdrag…
-
High 8.4
Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to mem…
-
Medium 6.7
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release cal…
-
High 8.4
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon C…
-
Critical 9.3
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto…
-
High 7.3
Possible authentication bypass due to improper order of signature verification and hashing in the signature verificatio…
-
Medium 6.8
Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges i…
-
Medium 6.8
Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read an…
-
High 7.3
Possible authentication bypass due to improper order of signature verification and hashing in the signature verificatio…
-
Unscored —
Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate.
-
Unscored —
wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by send…
-
Medium 4.7
Overly permissive umask for daemons
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users …
-
Critical 9.8
Session Fixation
In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.
-
Unscored —
Regular Expression Denial of Service (ReDoS) vulnerability in Apache OFBiz
Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles URLs provided by external, unauthenticated users. Upgrade to 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12599
-
Unscored —CVE-2022-29063 Public exploit
Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz
The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099. In version 18.12.05 and earlier, by hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or…
-
Unscored —
Server-Side Template Injection affecting the ecommerce plugin of Apache OFBiz
In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the "Contact us" page. Then a party manager needs to list the communications in t…
-
Unscored —
Unauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz
Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. By leveraging a bug in Birt (https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142) it is possible to perform a remote code execution…
-
Unscored —
Unauth Stored XSS vulnerability in the Birt plugin of Apache OFBiz
Apache OFBiz uses the Birt plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. In Apache OFBiz release 18.12.05, and earlier versions, by leveraging a vulnerability in Birt (https://bugs.eclipse.org/bugs/show_bug.cgi?id…
-
Unscored —
An issue was discovered in the MediaWiki through 1.38.2. The community configuration pages for the GrowthExperiments ex…
-
Unscored —
Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the b…
-
Unscored —
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.ph…
-
Unscored —
Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at…
-
Unscored —
Miniblog.Core v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blog/edit. Th…
-
Unscored —
BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/a…
-
Unscored —
Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectById…
-
Unscored —
kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /con…
-
Unscored —
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?…
-
Unscored —
libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.
-
High 7.8
Avaya IP Office Privilege Escalation Vulnerability
A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier vers…
-
Unscored —
Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can…
-
Unscored —
An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occ…
-
High 8.8
BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capa…
-
High 8.8
BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c …
-
High 7.8
An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromi…
-
Unscored —
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unma…
-
High 8.3
Grafana Image Renderer leaking files
Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs using a headless browser (Chromium/Chrome). An internal security review identified an unauthorized file disclosure vulnerability. It is possible for a mal…