Archive
6 June 2023
Vulnerabilities first published on this day (UTC), newest first.
73 results · Clear filters · Feed
-
Medium 5.4
Improper checks for deactivated users during login in synapse
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In affected versions it may be possible for a deactivated user to login when using uncommon configurations. This only applies if any of the following are true: 1. JSON Web T…
-
Medium 5.4
Default `maxSignatureAttempts` in `notation verify` enables an endless data attack in notation
notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures to an artifact can cause denial of service of services on the machine, if a user runs notation verif…
-
Medium 4.1
Grafana has Broken Access Control in Alert manager: Viewer can send test alerts
Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available from the user panel UI for users having the Viewer role. It is still possible for a user with the Viewer role to send a test alert using the …
-
Medium 4.6
Cross-site Scripting (XSS) in Web GUI in syncthing
Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync malicious files which contain arbitrary HTML and JavaScript in the name. If the owner of another device loo…
-
Medium 6.1
Landscape Open Redirect
Landscape allowed URLs which caused open redirection.
-
Medium 6.8
Landscape insecure token generation
Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.
-
Medium 6.5
Retrieval of Attachments to Comments lacks Authorization
A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbi…
-
Medium 6.7
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 6.7
In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 6.7
In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 6.7
In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…
-
Medium 6.7
In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…
-
Medium 4.1
In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosu…
-
Medium 6.7
In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 4.4
In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with Sy…
-
Medium 6.7
In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privile…
-
Medium 6.7
In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privile…
-
Medium 6.7
In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with …
-
Medium 6.7
In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privile…
-
Medium 4.4
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 4.4
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 6.7
In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wi…
-
Medium 6.7
In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wi…
-
Medium 6.7
In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wi…
-
Medium 6.4
In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privile…
-
Medium 6.7
In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wi…
-
Medium 6.7
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 6.3
SourceCodester Service Provider Management System view_service.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file view_service.php. The manipulation of the argument id leads to sql injection. It is possible to ini…
-
Medium 6.3
SourceCodester Service Provider Management System view.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Service Provider Management System 1.0. Affected by this issue is some unknown functionality of the file view.php. The manipulation of the argument id leads to sql injection. …
-
Medium 4.3
Helmholz and MB Connect Line: Account takeover via password reset in multiple products
Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited am…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 6.2
Untrusted Pointer Dereference in Core
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.