Archive
6 June 2023
Vulnerabilities first published on this day (UTC), newest first.
60 results · Clear filters · Feed
-
High 7.6
Mandatory control bypass in Lime2
Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances.
-
High 8.4
Verification bypass can cause users into verifying the wrong artifact
notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to verify the wrong artifact. The problem has been fixed in the release v1.0.0-rc.6. Users should upgrade their notation-g…
-
High 7.5
Grafana Missing Synchronization vulnerability
Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance. The only feature that uses mi…
-
High 8.1CVE-2023-33977 Public exploit
Stored cross site scripting (XSS) via unrestricted file upload in Kiwi TCMS
Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced upload validators in order to prevent potential…
-
High 7.5
Regex Injection via Doctype Entities
fast-xml-parser is an open source, pure javascript xml parser. fast-xml-parser allows special characters in entity names, which are not escaped or sanitized. Since the entity name is used for creating a regex for searching and replacing entities in the XML bo…
-
High 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This cou…
-
High 7.8
The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could …
-
High 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This cou…
-
High 8.1
Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin
The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of `${{ github.event.pull_request.t…
-
High 7.8
The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then…
-
High 7.8
Horner Automation Cscape Out-of-bounds Read
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the …
-
High 7.8
Horner Automation Cscape Out-of-bounds Write
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e374b. An attacker could leverage this vulnerability to execute arbitrary code in …
-
High 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This cou…
-
High 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This co…
-
High 7.8
Horner Automation Cscape Out-of-bounds Write
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e3c04. An attacker could leverage this vulnerability to potentially execute arbitr…
-
High 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This cou…
-
High 8.8
Helmholz and MB Connect Line: Account takeover via password reset in multiple products
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same accoun…
-
High 8.8
ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissio…
-
High 7.8
Improper Access control in GPU Subsystem
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
-
High 8.2
Buffer Over-read in WLAN HOST
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while parsing WLAN beacon or probe-response frame.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing FT Information Elements.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while processing frames with missing header fields.
-
High 7.5
Buffer Over-Read in WLAN Firmware
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
-
High 7.8
Improper Input Validation in Audio
Memoru corruption in Audio when ADSP sends input during record use case.
-
High 7.8
Improper Input Validation in WLAN HOST
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
-
High 8.4
Stack-based Buffer Overflow in Automotive GPU
Memory corruption in Automotive GPU while querying a gsl memory node.
-
High 8.4
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.
-
High 7.5
Improper authentication in Modem
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
-
High 7.1
Improper access control in Kernel
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
-
High 7.1
Information Exposure in Linux Networking Firmware
Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
-
High 7.1
Information exposure in Kernel
Information disclosure in Kernel due to indirect branch misprediction.
-
High 8.4
Double free in Linux Networking
Memory corruption in Linux Networking due to double free while handling a hyp-assign.
-
High 7.5
Improper authorization in Modem
Transient DOS due to improper authorization in Modem
-
High 8.4
Double free in Core
Memory corruption due to double free in Core while mapping HLOS address to the list.
-
High 8.4
Double free in Automotive
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
-
High 7.9
Stack-based buffer overflow in Modem
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem because of invalid network configuration.
-
High 7.1
Cryptographic issue in Core
information disclosure due to cryptographic issue in Core during RPMB read request.