Archive
16 September 2022
Vulnerabilities first published on this day (UTC), newest first.
266 results · Feed
-
Unscored —
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership/setProfile DisplayName field, …
-
Medium 5.9
`CHECK` failure in `SobolSample` via missing validation in TensorFlow
TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure (assertion failure) caused by assuming `input(0)`, `input(1)`, and `input(2)` to be scalar. This issue has b…
-
High 7.0
OOB read in `Gather_nd` op in TensorFlow Lite Micro
TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a cr…
-
Medium 5.9
`CHECK` failure in tf.reshape in Tensorflow
TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of service via CHECK-failure (assertion failure) caused by overflowing the number of elements in a tensor. This issue has b…
-
Unscored —
Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute…
-
Unscored —CVE-2022-38621 EPSS 26%
Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page. This vulner…
-
Critical 9.8
Delta Electronics DIAEnergy Use of Hard-coded Credentials
Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using ha…
-
Unscored —
When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session …
-
Unscored —
Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a pani…
-
Unscored —
Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may ca…
-
Unscored —
Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the con…
-
Unscored —
Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cau…
-
Unscored —
Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentialit…
-
Unscored —
The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may ca…
-
Critical 9.8
The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause…
-
High 7.5
The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may …
-
Critical 9.8
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerabil…
-
Unscored —
The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability …
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availab…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availab…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availab…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leak…
-
Unscored —
The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leak…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availab…
-
Unscored —
The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the devi…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availab…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availab…
-
Unscored —
The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cau…
-
Unscored —
Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of t…
-
Unscored —
Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of t…
-
Critical 9.1
The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability …
-
Medium 5.4
AEM Reflected XSS Arbitrary code execution
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be execute…
-
Medium 5.4
AEM Reflected XSS Arbitrary code execution
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be execute…