Archive
February 2023
Vulnerabilities first published in this month (UTC), newest first.
2,189 results · Feed
-
High 7.2
Sudo before 1.9.13p2 has a double free in the per-command chroot feature.
-
Medium 5.9
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data …
-
High 8.8
An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office dir…
-
High 7.5
An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authenti…
-
Unscored —
An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue ins…
-
High 7.5
Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the fi…
-
Medium 4.8
An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer_0/admins/a…
-
Medium 5.5
In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expec…
-
Medium 5.5
In the Linux kernel before 5.17.2, drivers/soc/qcom/qcom_aoss.c does not release an of_find_device_by_node reference af…
-
Medium 5.5
In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev retu…
-
Medium 5.5
In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table …
-
High 7.8
In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks ce…
-
High 7.5
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before …
-
High 7.5
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before …
-
High 7.8
In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing b…
-
High 7.8CVE-2023-20943 Public exploit
In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a pat…
-
High 7.8
In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. Thi…
-
High 7.8
In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper lockin…
-
Medium 6.8
VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted…
-
High 7.8
In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicato…
-
Low 3.3
In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due …
-
Critical 9.8
In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy.…
-
High 8.1CVE-2023-20938 Public exploit
In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. …
-
High 7.8
In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. Th…
-
High 7.5
In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. Th…
-
High 7.8CVE-2023-20933 Public exploit
In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could l…
-
High 7.8CVE-2023-20944 Public exploit
In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization.…
-
Medium 6.1
An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote inj…
-
Medium 6.5
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to …
-
Unscored —
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to …
-
High 7.5
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via th…
-
High 7.5CVE-2022-47076 Public exploit
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via Displa…
-
Medium 5.5
In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lea…
-
Medium 6.7
In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic …
-
Medium 5.5
In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhausti…
-
Medium 6.5
XML External Entity (XXE) injection in GeoServer style upload functionality
GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. GeoNode is vulnerable to an XML External Entity (XXE) injection in the style upload functionality of GeoServer leading to Arbitrary File Read.…
-
Low 2.6
Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigured
Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code. It is recommended tha…
-
High 7.5
Correos Oficial <= 1.2.0.2 - Unauthenticated Arbitrary File Download
The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server.
-
Medium 6.1
Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting
The Custom Add User WordPress plugin through 2.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
-
High 7.2
GeoDirectory < 2.2.24 - Admin+ SQLi
The GeoDirectory WordPress plugin before 2.2.24 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.