Archive
20 September 2022
Vulnerabilities first published on this day (UTC), newest first.
96 results · Feed
-
Critical 9.8
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /…
-
Medium 5.5
SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.
-
Medium 5.5
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.
-
Medium 5.5
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c.
-
Medium 5.5
SWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at /home/bupt/Desktop/swf…
-
Medium 5.5
SWFTools commit 772e55a2 was discovered to contain a heap-buffer-overflow via getTransparentColor at /home/bupt/Desktop…
-
Medium 5.5
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via __asan_memcpy at /asan/asan_interceptors_…
-
High 7.5
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') McWebserver Minecraft Mod
McWebserver mod runs a simple HTTP server alongside the Minecraft server in seperate threads. Path traversal in McWebserver Minecraft Mod for Fabric and Quilt up to and including 0.1.2.1 and McWebserver Minecraft Mod for Forge up to and including 0.1.1 allows…
-
Medium 6.1
XSS Vulnerabilities in WebClient
SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting (XSS) vulnerabilities in the SFTPGo WebClient, allowing remote attackers to inject malicious code. This issue is patched in version 2.3.5. No known workarounds…
-
Medium 6.5
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.5. An app may be able t…
-
High 7.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Mon…
-
Critical 9.8
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An app…
-
Medium 5.3
A logic issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. A …
-
High 8.8
This issue was addressed with improved environment sanitization. This issue is fixed in macOS Monterey 12.4. A sandboxe…
-
Critical 9.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 …
-
High 8.8
A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a…
-
High 8.8
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a…
-
High 8.8
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a…
-
High 8.8
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a…
-
High 8.8
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a…
-
High 7.8
A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss …
-
High 8.8
A remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code execution vulnerability that …
-
High 7.8
An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that co…
-
High 8.8
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a…
-
High 8.8
A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidential…
-
Critical 9.8
A security issue was discovered in Z-BlogPHP <= 1.7.2. A Server-Side Request Forgery (SSRF) vulnerability in the zb_use…
-
High 7.8
A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their u…
-
High 7.2
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …
-
High 8.8
A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to…
-
High 7.2
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …
-
High 7.2
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …
-
High 7.5
A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker …
-
High 7.2
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …
-
High 7.2
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …
-
High 7.2
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …
-
High 7.5
Random number seed fixed during compilation
The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using the Compute@Edge JavaScript SDK. In versions prior to 0.5.3, the `Math.random` and `crypto.getRandomValues` methods fail to use sufficientl…
-
Medium 4.3
There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can ca…
-
High 7.5
A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS …
-
Medium 5.5
A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain reso…
-
Medium 6.5
There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force crackin…