Archive
14 October 2022
Vulnerabilities first published on this day (UTC), newest first.
72 results · Clear filters · Feed
-
Medium 5.5
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 5.5
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 4.9
Malicious agent may be able to impersonate another agent in GoCD
GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions prior to 21.1.0 can allow one authenticated agent to impersonate another agent, and thus receive w…
-
Medium 5.5
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 5.5
In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service …
-
Medium 5.5
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with…
-
Medium 6.5
GoCD API authentication of user access tokens subject to timing attack during comparison
GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions from 19.2.0 to 19.10.0 (inclusive) are subject to a timing attack in validation of access tokens d…
-
Medium 5.5
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 5.5
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In cell service, there is a missing permission check. This could lead to local denial of service in cell service with n…
-
Medium 5.5
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local …
-
Medium 5.5
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local …
-
Medium 5.5
In music service, there is a missing permission check. This could lead to local denial of service in music service with…
-
Medium 5.5
In messaging service, there is a missing permission check. This could lead to local denial of service in messaging serv…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o…
-
Medium 5.5
In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts se…
-
Medium 5.5
In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of ser…
-
Medium 4.5
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
-
Medium 6.3
SourceCodester Human Resource Management System Admin Panel employeeadd.php access control
A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Admin Panel. The manipulation leads to improper access control…
-
Medium 5.5CVE-2022-3506 Scanner template
Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp
Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3.
-
Medium 6.3
SourceCodester Sanitization Management System sql injection
A vulnerability was found in SourceCodester Sanitization Management System and classified as critical. This issue affects some unknown processing of the file /php-sms/?p=services/view_service. The manipulation of the argument id leads to sql injection. The at…
-
Medium 6.5
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a …
-
Medium 5.5
In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o…
-
Medium 5.3
Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability.
-
Medium 6.1
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php.
-
Medium 4.3
Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerab…
-
Medium 5.4
Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting (XSS) vulnerabili…
-
Medium 6.1
Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS) Vulnerability.
-
Medium 5.5
In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logi…
-
Medium 6.2
Cassia Networks Access Controller Path Traversal
An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1.