Archive
7 October 2022
Vulnerabilities first published on this day (UTC), newest first.
117 results · Feed
-
Medium 5.1
Improper access control vulnerability in FACM application prior to SMR Oct-2022 Release 1 allows a local attacker to co…
-
Medium 4.4
A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory acces…
-
Medium 4.0
Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitiv…
-
Medium 4.0
Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers …
-
Medium 4.0
Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to…
-
Medium 4.0
Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android …
-
Medium 5.1
Improper component protection vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized…
-
Medium 4.0
Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access Ser…
-
Medium 4.0
Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attack…
-
Low 3.3
Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attacke…
-
Medium 4.0
Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows att…
-
Unscored —
In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Unscored —
In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…
-
Unscored —
In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service …
-
Unscored —
In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to re…
-
Unscored —
In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of pr…
-
Unscored —CVE-2022-36635 EPSS 17%
ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.d…
-
Medium 5.9
Improper restriction of broadcasting Intent in MouseNKeyHidDevice prior to SMR Oct-2022 Release 1 leaks MAC address of …
-
Unscored —
An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a …
-
Unscored —CVE-2022-31680 EPSS 31%
The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malici…
-
Unscored —
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process o…
-
High 8.4
Puppetlabs-mysql Command Injection
Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppe…
-
High 7.3
Allocation of Resources Without Limits or Throttling in nocodb/nocodb
Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0.
-
Critical 9.8
Improper Privilege Management in tooljet/tooljet
Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgot_password_token the hacker can send the request and changed the pass
-
Medium 5.0
SourceCodester Web-Based Student Clearance System POST Parameter login.php sql injection
A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affected is an unknown function of the file /Admin/login.php of the component POST Parameter Handler. The manipulation of the argument txtusern…
-
High 8.4
Puppetlabs-apt Command Injection
Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet a…
-
Unscored —
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Critical 9.8
An SQL injection vulnerability issue was discovered in Sourcecodester Simple E-Learning System 1.0., in /vcs/classRoom.…
-
Unscored —
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Critical 9.8
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Critical 9.8
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Critical 9.8
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Unscored —
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Critical 9.8
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Unscored —
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Unscored —
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Unscored —
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Critical 9.8
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
Critical 9.8
B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.p…
-
High 8.1
Session still functional after user is deactivated
In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.