Archive
September 2022
Vulnerabilities first published in this month (UTC), newest first.
2,174 results · Feed
-
Critical 9.8CVE-2022-36663 Public exploit
Gluu Oxauth before v4.4.1 vulnerable to Server-Side Request Forgery attacks via a crafted request_uri parameter
Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.
-
Medium 6.5
Elrond go can execute on same context checks in VM
Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will…
-
Unscored —
An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer p…
-
High 7.9
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could…
-
High 7.5
Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerabili…
-
Medium 6.1
Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicio…
-
Medium 6.1
Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could poten…
-
High 7.5
elrond-go MultiESDTNFTTransfer call on a SC address with missing function name
Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.34, anyone who uses elrond-go to process blocks (historical or actual) could encounter a `MultiESDTNFTTransfer` transaction like this: `MultiESDTNFTTransfer` with a m…
-
Unscored —
Persistent cross-site scripting (XSS) in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Java…
-
Medium 5.4
Discourse-Chat Cross-Site Scripting issue for channel names and descriptions
Discourse-Chat is an asynchronous messaging plugin for the Discourse open-source discussion platform. Users of Discourse Chat can be affected by admin users inserting HTML into chat titles and descriptions, causing a Cross-Site Scripting (XSS) attack. Version…
-
Unscored —
SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system …
-
High 7.8
Out-of-bounds write when parsing DEX files in Rizin
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to out-of-bounds write when parsing DEX files. A user opening a malicious DEX file could be affected by this vulnerability, allowing an attack…
-
High 8.8
CircuitVerse potential RCE vulnerability via Oj.load
CircuitVerse is an open-source platform which allows users to construct digital logic circuits online. A remote code execution (RCE) vulnerability in CircuitVerse allows authenticated attackers to execute arbitrary code via specially crafted JSON payloads. Th…
-
Unscored —
WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their …
-
Unscored —
A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM …
-
Medium 5.3
ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent
ReactPHP HTTP is a streaming HTTP client and server implementation for ReactPHP. In ReactPHP's HTTP server component versions starting with 0.7.0 and prior to 1.7.0, when ReactPHP is processing incoming HTTP cookie values, the cookie names are url-decoded. Th…
-
Unscored —
An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buf…
-
Low 2.7
Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator
Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior to versions 22.2.10, 23.0.7, and 24.0.3 the random password generator may, in very rare cases, generate common passwords that the validator …
-
Critical 9.8
FeehiCMS has an arbitrary file upload vulnerability
There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code.
-
Unscored —
PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers w…
-
Unscored —
IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Adminis…
-
Unscored —
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication ser…
-
Critical 9.8
An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rul…
-
High 7.5
sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling…
-
High 7.5
golang.org/x/net/http2 Denial of Service vulnerability
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
-
Unscored —
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esc…
-
Unscored —
In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation…
-
Unscored —
In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o…
-
Unscored —
In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation …
-
Unscored —
In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information d…
-
Unscored —
In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation o…
-
Unscored —
In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala…
-
Unscored —
In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o…
-
Unscored —
In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information d…
-
Unscored —
In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclos…
-
Unscored —
In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege w…
-
Unscored —
In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Unscored —
In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o…
-
Unscored —
In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wi…