Archive
8 November 2022
Vulnerabilities first published on this day (UTC), newest first.
120 results · Feed
-
Medium 4.9
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with h…
-
Medium 6.5
Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to i…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
Medium 4.8
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the…
-
Medium 6.5
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anyw…
-
Medium 6.1
SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unaut…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
Medium 5.4
Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with…
-
Medium 6.1
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the…
-
High 8.8
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing opera…
-
Medium 4.7
SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site du…
-
Medium 6.1
SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting…
-
Critical 9.8
Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation…
-
High 7.5
In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of…
-
High 7.5
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…
-
Critical 9.9
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…
-
High 7.5CVE-2022-43343 Public exploit
N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c.
-
Critical 9.9
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…
-
Medium 5.4CVE-2022-43144 Public exploit
A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web …
-
Critical 9.9
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER …
-
High 7.6
A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). …
-
High 7.8
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.…
-
Medium 5.5
In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error.…
-
Medium 6.7
In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local …
-
Medium 5.5
In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exc…
-
Low 3.3
In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the b…
-
High 7.8
In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check.…
-
Medium 6.5
In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remot…
-
High 7.5
In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validat…
-
High 7.8
In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in th…
-
Medium 5.5
In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to im…
-
Medium 5.5
In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a …
-
High 7.8CVE-2022-20452 Public exploit
In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused…
-
High 7.8
In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission c…
-
Medium 5.5
In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account du…
-
Medium 4.6
In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen b…
-
High 7.8
In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a…
-
High 7.8
In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a mis…
-
High 7.8
In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. …
-
Medium 5.4CVE-2021-40303 Public exploit
perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.