Archive
6 July 2023
Vulnerabilities first published on this day (UTC), newest first.
48 results · Clear filters · Feed
-
Medium 6.5
PiiGAB M-Bus Plaintext Storage of a Password
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
-
Medium 5.9
PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts
The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.
-
Medium 6.8
Sentry CORS misconfiguration vulnerability
Sentry is an error tracking and performance monitoring platform. Starting in version 23.6.0 and prior to version 23.6.2, the Sentry API incorrectly returns the `access-control-allow-credentials: true` HTTP header if the `Origin` request header ends with the `…
-
Medium 6.1
yt-dlp File Downloader cookie leak
yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments diffe…
-
Medium 5.4
Mastodon's verified profile links can be formatted in a misleading way
Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 2.6.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker can craft a verified profile link using specific formatting to conceal arbitrary parts of the link…
-
Medium 5.3
Rotem Dynamics Rotem CRM OTP URI Interface information exposure
A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unknown part of the file /LandingPages/api/otp/send?id=[ID][ampersand]method=sms of the component OTP URI Interface. The manipulation leads to…
-
Medium 6.3
ThinuTech ThinuCMS category.php sql injection
A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument cat_id leads to sql injection. The attack may be launched remo…
-
Medium 4.3
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was…
-
Medium —
@vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability
### Impact Vendure provides an authorization system with different levels of privileges. For example, an administrator cannot create another administrator. In the admin UI, there are a couple of places with description inputs, such as inventory/collection cat…
-
Medium 6.3
SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.
SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the `library_path` config value to allow arbitrary python code to …
-
Medium 6.5
A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. …
-
Medium 4.7
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN…
-
Medium 4.7
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN…
-
Medium 4.2
A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-cra…
-
Medium 5.4
Novu Open Redirect Vulnerability in Sign-In with GitHub Functionality
Novu provides an API for sending notifications through multiple channels. Versions prior to 0.16.0 contain an open redirect vulnerability in the "Sign In with GitHub" functionality of Novu's open-source repository. It could have allowed an attacker to force a…
-
Medium 6.0
Metersphere missing permission check
Metersphere is an open source continuous testing platform. In versions prior to 2.10.2 LTS, some key APIs in Metersphere lack permission checks. This allows ordinary users to execute APIs that can only be executed by space administrators or project administra…
-
Medium 6.1
Out-of-bounds Read in gpac/gpac
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.
-
Medium 5.4
All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used t…
-
Medium 5.1
Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows att…
-
Medium 6.1
Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access dat…
-
Medium 4.6
Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access dat…
-
Medium 6.2
Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account inform…
-
Medium 6.5
Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.
-
Medium 5.5
Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attac…
-
Medium 6.8
Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.23043_3 …
-
Medium 6.3
Logic error in package installation via adb command prior to SMR Jul-2023 Release 1 allows local attackers to downgrade…
-
Medium 6.7
Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attack…
-
Medium 6.7
Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local att…
-
Medium 6.7
Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacke…
-
Medium 5.1
Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with …
-
Medium 5.3
Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows l…
-
Medium 4.4
Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local …
-
Medium 5.3
Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to SMR Jul-2023 Release 1 allo…
-
Medium 6.2
Exposure of Sensitive Information vulnerability in getChipIds in UwbAospAdapterService prior to SMR Jul-2023 Release 1 …
-
Medium 6.2
Exposure of Sensitive Information vulnerability in getChipInfos in UwbAospAdapterService prior to SMR Jul-2023 Release …
-
Medium 6.2
Exposure of Sensitive Information vulnerability in getDefaultChipId in UwbAospAdapterService prior to SMR Jul-2023 Rele…
-
Medium 6.2
Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch…
-
Medium 6.2
Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attac…
-
Medium 6.7
Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local at…
-
Medium 6.7
Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows loca…