Archive
November 2022
Vulnerabilities first published in this month (UTC), newest first.
900 results · Clear filters · Feed
-
Medium 5.5
In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exc…
-
Medium 6.5
In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remot…
-
Medium 5.5
In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to im…
-
Medium 5.5
In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a …
-
Medium 5.5
In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account du…
-
Medium 4.6
In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen b…
-
Medium 5.4CVE-2021-40303 Public exploit
perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.
-
Medium 4.0
Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Home Office (W…
-
Medium 6.5
DXL Broker privilege escalation vulnerability
Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.
-
Medium 6.5
A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could…
-
Medium 6.5
Cross-site Scripting (XSS) - DOM in jgraph/drawio
Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2.
-
Medium 5.3
WP Hide <= 0.0.2 - Unauthenticated Settings Update
The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request
-
Medium 4.3
Product Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX Calls
The Product Stock Manager WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks in multiple AJAX actions, allowing users with a role as low as subscriber to call them. One action in particular could allow to update arbitrary options
-
Medium 4.8
Highlight Focus <= 1.1 - Admin+ Stored Cross Site Scripting
The Highlight Focus WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
-
Medium 4.3
Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF
The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete a…
-
Medium 6.5CVE-2022-44793 EPSS 53%
handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Except…
-
Medium 6.5
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. A flaw was found in the Web Service, which could le…
-
Medium 6.5CVE-2022-44792 EPSS 52%
handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bu…
-
Medium 6.5
Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the componen…
-
Medium 4.8
Food Ordering Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the compon…
-
Medium 4.7CVE-2021-42205 Public exploit
ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows loc…
-
Medium 6.5CVE-2022-3869 Scanner template
Code Injection in froxlor/froxlor
Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.
-
Medium 4.7
SourceCodester Sanitization Management System sql injection
A vulnerability classified as critical has been found in SourceCodester Sanitization Management System. Affected is an unknown function of the file /php-sms/classes/Master.php?f=save_quote. The manipulation of the argument id leads to sql injection. It is pos…
-
Medium 4.9
Denial of Service in Splunk Enterprise through search macros
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who can create search macros and schedule search reports can cause a denial of service through the use of specially crafted search macros.
-
Medium 6.2
HCL Workload Automation is affected by a vulnerability in Jlog component of the Master Domain Manager
HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash.
-
Medium 5.5
HCL Domino is susceptible to an information disclosure vulnerability
HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access at…
-
Medium 6.6
BD Totalys MultiProcessor - Hardcoded Credentials
BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health informat…
-
Medium 4.8
The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.
The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.
-
Medium 4.2
The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests.
The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0.
-
Medium 5.6
OpenZeppelin Contracts initializer reentrancy may lead to double initialization
OpenZeppelin Contracts is a library for secure smart contract development. Before version 4.4.1 but after 3.2.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal proxies) may be reentered if they…
-
Medium 6.5
Incorrect access control in the anti-virus driver wsdkd.sys of Watchdog Antivirus v1.4.158 allows attackers to write ar…
-
Medium 4.2
Use of Externally-Controlled Format String in pingcap/tidb
Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.
-
Medium 5.9
Trellix IPS Manager vulnerable to XXE
XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.
-
Medium 5.4CVE-2021-39473 Public exploit
Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting (XSS) due to improper sanitization of comment and cont…
-
Medium 6.5
-
Medium 6.4
Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user that holds the “power” Splunk role can store arbitrary scripts that can lead to persistent cross-site scripting (XSS). The vulnerability affects instances with Splunk Web enabled.
-
Medium 4.3
WordPress Content Egg plugin <= 5.4.0 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Keywordrush Content Egg plugin <= 5.4.0 on WordPress.
-
Medium 4.4
A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerabi…
-
Medium 5.9
WordPress 4ECPS Web Forms plugin <= 0.2.17 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JumpDEMAND Inc. 4ECPS Web Forms plugin <= 0.2.17 on WordPress.
-
Medium 4.7
A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthent…