Archive
3 January 2023
Vulnerabilities first published on this day (UTC), newest first.
42 results · Clear filters · Feed
-
Medium 4.3
IBM Business Automation Workflow cross-site request forgery
IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
-
Medium 6.5
Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not suff…
-
Medium 5.5
A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance acces…
-
Medium 5.7
A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privilege…
-
Medium 4.3
Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds
Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Rosco microservice produces machine images. Rosco prior to versions 1.29.2, 1.28.4, and 1.27.3 does not property mask secrets generated via p…
-
Medium 4.6
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remot…
-
Medium 4.8
Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a mu…
-
Medium 6.1
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could a…
-
Medium 6.1
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could a…
-
Medium 6.1
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could a…
-
Medium 6.8
A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerabi…
-
Medium 6.1
ViewVC XSS vulnerability in revision view changed paths
ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit …
-
Medium 5.3
An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In For…
-
Medium 6.6
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 thr…
-
Medium 5.5
Members Import <= 1.4.2 - Self Cross-Site Scripting
The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the user_login parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible …
-
Medium 4.7
ummmmm nflpick-em.com LoadUsers.php _Load_Users sql injection
A vulnerability classified as problematic was found in ummmmm nflpick-em.com up to 2.2.x. This vulnerability affects the function _Load_Users of the file html/includes/runtime/admin/JSON/LoadUsers.php. The manipulation of the argument sort leads to sql inject…
-
Medium 5.3
ethitter WP-Print-Friendly wp-print-friendly.php information disclosure
A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unknown part of the file wp-print-friendly.php. The manipulation leads to information disclosure. It is possible to initiate the attack remotel…
-
Medium 6.7
In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege w…
-
Medium 6.7
In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege w…
-
Medium 4.1
In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclo…
-
Medium 6.7
In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation …
-
Medium 6.7
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escal…
-
Medium 6.7
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escal…
-
Medium 6.7
In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege w…
-
Medium 6.7
In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala…
-
Medium 6.7
In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation…
-
Medium 6.4
In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege w…
-
Medium 6.4
In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privile…
-
Medium 6.7
In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation o…
-
Medium 6.7
In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of…
-
Medium 6.7
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escal…
-
Medium 6.4
In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 6.7
In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege w…
-
Medium 6.7
In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with…
-
Medium 4.4
In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation …
-
Medium 6.7
In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of pr…
-
Medium 6.1
In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to byp…
-
Medium 6.5
ChangingTec ServiSign - Path Traversal
ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and access arbitrary system files.
-
Medium 6.5
Galaxy Software Services Corporation. Vitals ESP - Arbitrary Path File Reading
Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files.