Archive
6 February 2023
Vulnerabilities first published on this day (UTC), newest first.
187 results · Feed
-
Low 3.5
ciubotaru share-on-diaspora new_window.php cross site scripting
A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated…
-
Medium 5.5
Gimmie Plugin trigger_login.php sql injection
A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical. Affected by this vulnerability is an unknown functionality of the file trigger_login.php. The manipulation of the argument userid leads to sql injection. Upgrading …
-
Medium 5.5
A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test …
-
Medium 4.6
A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the funct…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parame…
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect pa…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_ord…
-
Critical 9.8
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country par…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the tic…
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect pa…
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parame…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.p…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.…
-
Critical 9.8
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassi…
-
High 8.1
Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability…
-
High 7.5
Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorize…
-
Medium 6.7
In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege …
-
Medium 4.4
In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d…
-
Medium 6.4
In gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Medium 6.4
In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of p…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 4.4
In ccu, there is a possible out of bounds read due to a logic error. This could lead to local information disclosure wi…
-
Medium 6.4
In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of priv…
-
Medium 6.7
In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege…
-
Medium 6.7
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.4
In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Medium 6.7
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of priv…
-
Medium 6.1CVE-2022-28923 Scanner template
Open Redirect in Caddy
Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.
-
Medium 4.4
In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local informat…
-
High 7.5
In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of …
-
Medium 6.4
In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 6.7
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escal…
-
Medium 6.7
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escal…