Archive
February 2023
Vulnerabilities first published in this month (UTC), newest first.
2,189 results · Feed
-
Medium 5.5
In log service, there is a missing permission check. This could lead to local denial of service in log service.
-
Medium 4.0
In log service, there is a missing permission check. This could lead to local denial of service in log service.
-
Medium 4.0
In log service, there is a missing permission check. This could lead to local denial of service in log service.
-
Medium 4.0
In log service, there is a missing permission check. This could lead to local denial of service in log service.
-
Medium 4.0
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermo…
-
Medium 5.5
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermo…
-
Medium 4.0
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermo…
-
Medium 5.5
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermo…
-
Medium 5.5
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermo…
-
Medium 5.5
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermo…
-
Medium 5.5
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermo…
-
Medium 6.7
In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with sy…
-
Medium 4.7
In wlan driver, there is a race condition. This could lead to local denial of service in wlan services.
-
Medium 6.7
In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escala…
-
High 7.4
semver-tags is vulnerable to Command Injection via the getGitTagsRemote function
All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization.
-
High 7.4
create-choo-app3 is vulnerable to Command Injection via the devInstall function
All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization.
-
Low 3.5
ciubotaru share-on-diaspora new_window.php cross site scripting
A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated…
-
Medium 5.5
Gimmie Plugin trigger_login.php sql injection
A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical. Affected by this vulnerability is an unknown functionality of the file trigger_login.php. The manipulation of the argument userid leads to sql injection. Upgrading …
-
Medium 5.5
A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test …
-
Medium 4.6
A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the funct…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parame…
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect pa…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_ord…
-
Critical 9.8
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country par…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the tic…
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect pa…
-
Medium 6.1
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parame…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.p…
-
Critical 9.8
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.…
-
Critical 9.8
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassi…
-
High 8.1
Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability…
-
High 7.5
Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorize…
-
Medium 6.7
In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege …
-
Medium 4.4
In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d…
-
Medium 6.4
In gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Medium 6.4
In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of p…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…