Archive
14 November 2022
Vulnerabilities first published on this day (UTC), newest first.
97 results · Feed
-
Medium 4.2
The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.
Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents th…
-
Low 3.3
Local information exposure in Zoom Clients
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insuffici…
-
Medium 5.9
IBM CICS TX information disclosure
IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229464.
-
Medium 5.4
IBM CICS TX cross-site scripting
IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For…
-
Medium 5.4
IBM CICS TX clickjacking
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch furth…
-
Low 3.7
IBM CICS TX information disclosure
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.
-
Medium 4.0
IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force …
-
Medium 5.4
IBM CICS TX cross-site scripting
IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For…
-
Medium 5.3
IBM CICS TX phishing
IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172.
-
Medium 4.0
IBM CICS TX information disclosure
IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447.
-
Medium 6.5
Malformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier
A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error.
-
Medium 5.3
IBM CICS TX information disclosure
IBM CICS TX 11.7 could allow an attacker to obtain sensitive information from HTTP response headers. IBM X-Force ID: 229467.
-
Medium 5.9
IBM CICS TX information disclosure
IBM CICS TX 11.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229463.
-
Medium 6.5
Malformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silicon Labs Ember ZNet allows Overflow Buffers.
-
Medium 4.3
IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies
IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to t…
-
High 7.5
A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buff…
-
Medium 5.1
IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be…
-
High 8.1CVE-2022-0324 Public exploit
Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)
There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a c…
-
Medium 6.5CVE-2022-31630 Public exploit
OOB read due to insufficient input validation in imageloadfont()
In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer wi…
-
High 7.8
DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could …
-
High 7.0
DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM co…
-
High 7.0
DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMR…
-
Medium 6.4
DMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI handler could lead to a TOCTOU attack. …
-
Medium 6.4
DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver cou…
-
High 7.0
DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM co…
-
High 7.0
DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM …
-
High 7.0
DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM cor…
-
Medium 6.4
DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on t…
-
Medium 6.4
DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SM…
-
High 7.0
DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM c…
-
High 8.8
Konker v2.3.9 was to discovered to contain a Cross-Site Request Forgery (CSRF).
-
Medium 6.5
Users erroneously and transparently added to private messages in Discourse
Discourse is the an open source discussion platform. In some rare cases users redeeming an invitation can be added as a participant to several private message topics that they should not be added to. They are not notified of this, it happens transparently in …
-
Medium 6.1
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS.
-
Medium 6.4
DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU …
-
Medium 6.4
DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM …
-
Medium 6.4
Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler use…
-
High 7.5
Apache Airflow prior to 2.3.1 may include sensitive values in rendered template
A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example when they were depending on past and previous instances of the task failed). This issue affects Apac…
-
Medium 4.8
Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting
The Testimonials WordPress plugin before 2.7, super-testimonial-pro WordPress plugin before 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capabi…
-
Critical 9.8CVE-2022-3477 Scanner template
tagDiv Composer < 3.5 - Unauthenticated Account Takeover
The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by…
-
High 7.8
A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneo…