Archive
December 2022
Vulnerabilities first published in this month (UTC), newest first.
810 results · Clear filters · Feed
-
High 7.5
Prototype Pollution
All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or modify properties of the Object.prototype.Consolidate when using the function safeEval. This is because the function uses vm variable, leading an attack…
-
High 7.4
Command Injection
The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization
-
High 7.5
Denial of Service (DoS)
All versions of package lite-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.
-
High 7.5
Directory Traversal
All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code.
-
High 8.4
Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L…
-
High 7.8
Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows deskto…
-
High 7.8
Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having …
-
High 7.5
Isode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request.
-
High 7.7
OpenFGA Authorization Bypass
OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal security assessment, it was discovered that OpenFGA version 0.3.0 is vulnerable to authorization bypass under certain conditions. This issue…
-
High 8.8
Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on…
-
High 7.8
A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A cr…
-
High 8.6
OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data W…
-
High 7.5
D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2…
-
High 7.5
Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data…
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security_5g parameter at /goform/WifiBasicSet.
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeed parameter at /goform/SetClientState.
-
High 7.5
The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may…
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet.
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceMac parameter at /goform/addWifiMacFilte…
-
High 7.5
The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may…
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState.
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the ssid parameter at /goform/fast_setting_wifi_se…
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentContro…
-
High 8.8
An issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 and TL-WA901N V2 up to v3.12.16 allows a…
-
High 7.5
The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may …
-
High 7.5
The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect s…
-
High 8.8
An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to e…
-
High 8.1
An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Poin…
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mac parameter at /goform/GetParentControlInfo.
-
High 7.5
D-Link DIR-869 DIR869Ax_FW102B15 is vulnerable to Authentication Bypass via phpcgi.
-
High 7.5
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sy…
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat.
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInf…
-
High 7.5
An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitr…
-
High 8.8
An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to exe…
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic.
-
High 7.5
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the speed_dir parameter at /goform/SetSpeedWan.
-
High 8.8
An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows …