Archive
16 December 2022
Vulnerabilities first published on this day (UTC), newest first.
53 results · Clear filters · Feed
-
High 8.6
Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack
A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).
-
High 7.1
Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution…
-
High 7.5
MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the …
-
High 7.8
Freedom of the Press SecureDrop gpg-agent.conf symlink
A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is some unknown functionality of the file gpg-agent.conf. The manipulation leads to symlink following. Local access is required to approach thi…
-
High 7.2
vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this is…
-
High 7.5
An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return val…
-
High 7.2
In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which…
-
High 7.5
AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The componen…
-
High 7.5
Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.
-
High 8.8
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
-
High 7.8
In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This co…
-
High 7.5
In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could l…
-
High 7.5
In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote deni…
-
High 7.8
In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input valida…
-
High 7.8
In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due t…
-
High 7.8
PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an attacker to gain root access through command…
-
High 8.8
The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user …
-
High 8.8
A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for …
-
High 7.8
The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issue…
-
High 7.8
In getSlice of ProviderModelSlice.java, there is a missing permission check. This could lead to local escalation of pri…
-
High 7.8
In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of pri…
-
High 7.8
In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. Th…
-
High 7.8
In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of pri…
-
High 7.5
In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds chec…
-
High 7.8
In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due …
-
High 7.4
In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local …
-
High 7.2
In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds c…
-
High 7.8
In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to impro…
-
High 7.8
In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This …
-
High 7.8
In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing pe…
-
High 7.8
In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local esc…
-
High 7.5
Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A
-
High 7.8
In ppmp_validate_wsm of drm_fw.c, there is a possible EoP due to improper input validation. This could lead to local es…
-
High 7.5
In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. Th…
-
High 7.8
In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a pe…
-
High 7.8
In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation. Th…
-
High 8.8
In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to re…
-
High 7.8
In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local e…
-
High 7.8
In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation…
-
High 7.8
In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of pri…