Archive
March 2023
Vulnerabilities first published in this month (UTC), newest first.
2,519 results · Feed
-
Medium 5.5
ZDI-CAN-19509: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue req…
-
Medium 5.5
ZDI-CAN-19410: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue req…
-
Medium 5.5
ZDI-CAN-19506: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue req…
-
Medium 5.5
ZDI-CAN-19413: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue req…
-
Medium 4.3
This disclosure regards a vulnerability related to UAA refresh tokens and external identity providers.Assuming that an …
-
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticat…
-
Medium 6.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-…
-
Low 3.9
This vulnerability allows local attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 pri…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …
-
Medium 6.5
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon image…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1…
-
Medium 6.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon image…
-
High 8.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF64…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…
-
Critical 9.8
ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which all…
-
High 7.5
FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Gen…
-
Critical 9.8CVE-2022-45460 Public exploit
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431…
-
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticat…
-
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticat…
-
Medium 5.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Aut…
-
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticat…
-
Medium 5.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Aut…
-
Unscored —CVE-2022-47529 Public exploit
Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin W…
-
Critical 9.6
Cross-origin resource sharing vulnerability affects HCL Compass
HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request.
-
High 8.1CVE-2023-26493 Public exploit
Command Injection in Cocos Engine workflow
Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the `web-interface-check.yml` was subject to command injection. The `web-interface-check.yml` was triggered when a p…
-
High 8.4
Command injection in discordrb
discordrb is an implementation of the Discord API using Ruby. In discordrb before commit `91e13043ffa` the `encoder.rb` file unsafely constructs a shell string using the file parameter, which can potentially leave clients of discordrb vulnerable to command in…
-
Medium —
NATS TLS certificate common name validation bypass
The NATS official Rust clients are vulnerable to MitM when using TLS. A fix for the `nats` crate hasn't been released yet. Since the `nats` crate is going to be deprecated anyway, consider switching to `async-nats` `>= 0.29` which already fixed this vulnerabi…
-
High 7.3
OneSignal repository github action command injection
OneSignal is an email, sms, push notification, and in-app message service for mobile apps.The Zapier.yml workflow is triggered on issues (types: [closed]) (i.e., when an Issue is closed). The workflow starts with full write-permissions GitHub repository token…
-
Medium 6.3
SourceCodester Automatic Question Paper Generator System GET Parameter view_class.php sql injection
A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. This vulnerability affects unknown code of the file users/classes/view_class.php of the component GET Parameter Handler. The manipulatio…
-
Medium 6.4
Permissions bypass in Apiman could enable authenticated attacker to unpermitted API Key
Apiman is a flexible and open source API Management platform. Due to a missing permissions check, an attacker with an authenticated Apiman Manager account may be able to gain access to API keys they do not have permission for if they correctly guess the URL, …
-
High 7.0
Stack references to locations outside buffers may become invalid if they exist during a GC compaction in Snappier
Snappier is a high performance C# implementation of the Snappy compression algorithm. This is a buffer overrun vulnerability that can affect any user of Snappier 1.1.0. In this release, much of the code was rewritten to use byte references rather than pointer…
-
Medium 5.4
Stored XSS possible on VSM and Job Details pages via malicious pipeline label configuration in gocd
GoCD is an open source continuous delivery server. GoCD versions before 23.1.0 are vulnerable to a stored XSS vulnerability, where pipeline configuration with a malicious pipeline label configuration can affect browser display of pipeline runs generated from …
-
Medium 4.2
Sensitive information disclosure possible on misconfigured failed backups of non-H2 databases in gocd
GoCD is an open source continuous delivery server. In GoCD versions from 20.5.0 and below 23.1.0, if the server environment is not correctly configured by administrators to provide access to the relevant PostgreSQL or MySQL backup tools, the credentials for d…
-
Medium 5.4
`authority-regex` returns the wrong authority in lambdaisland/uri
lambdaisland/uri is a pure Clojure/ClojureScript URI library. In versions prior to 1.14.120 `authority-regex` allows an attacker to send malicious URLs to be parsed by the `lambdaisland/uri` and return the wrong authority. This issue is similar to but distinc…
-
High 8.3
OS Command Injection via GIT_PATH in pymedusa
pymedusa is an automatic video library manager for TV Shows. In versions prior 1.0.12 an attacker with access to the web interface can update the git executable path in /config/general/ > advanced settings with arbitrary OS commands. An attacker may exploit t…
-
Low 3.5
Delete permissions are not saved when creating public share in Nextcloud server
Nextcloud server is an open source, personal cloud implementation. In versions from 24.0.0 and before 24.0.9 a user could escalate their permissions to delete files they were not supposed to deletable but only viewed or downloaded. This issue has been address…