Archive
14 November 2022
Vulnerabilities first published on this day (UTC), newest first.
23 results · Clear filters · Feed
-
High 7.5
A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buff…
-
High 8.1CVE-2022-0324 Public exploit
Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)
There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a c…
-
High 7.8
DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could …
-
High 7.0
DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM co…
-
High 7.0
DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMR…
-
High 7.0
DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM co…
-
High 7.0
DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM …
-
High 7.0
DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM cor…
-
High 7.0
DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM c…
-
High 8.8
Konker v2.3.9 was to discovered to contain a Cross-Site Request Forgery (CSRF).
-
High 7.5
Apache Airflow prior to 2.3.1 may include sensitive values in rendered template
A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example when they were depending on past and previous instances of the task failed). This issue affects Apac…
-
High 7.8
A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneo…
-
High 7.5
Pillow subject to DoS via SAMPLESPERPIXEL tag
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
-
High 7.5
Pillow vulnerable to Data Amplification attack.
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
-
High 8.8
Apache Airflow <2.4.0 has an RCE in a bash example
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.
-
High 7.5
WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset paramete…
-
High 8.8
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information compone…
-
High 8.8
Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/i…
-
High 7.2
Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a co…
-
High 7.2
An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers …
-
High 8.8
Concrete CMS vulnerable to Cross-site Request Forgery
Concrete CMS is vulnerable to CSRF due to the lack of "State" parameter for external Concrete authentication service for users of Concrete who use the "out of the box" core OAuth.
-
High 8.8
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component …
-
High 7.5
Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover.