Archive
3 October 2023
Vulnerabilities first published on this day (UTC), newest first.
42 results · Clear filters · Feed
-
High 7.6
Presto JDBC Server-Side Request Forgery by nextUri
### Summary Presto JDBC is vulnerable to Server-Side Request Forgery (SSRF) when connecting a remote Presto server. An attacker can modify the nextUri parameter to internal server in response content that Presto JDBC client will request next and view sensitiv…
-
High 7.6
Presto JDBC Server-Side Request Forgery by redirect
### Summary Presto JDBC is vulnerable to Server-Side Request Forgery (SSRF) when connecting a remote Presto server. An attacker can construct a redirect response that Presto JDBC client will follow and view sensitive information from highly sensitive internal…
-
High 7.8
Glibc: buffer overflow in ld.so leading to privilege escalation
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binar…
KEV Nov 21, 2023 -
High 7.2
Unrestricted file upload vulnerability in ICP DAS ET-7060
This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the upload functionality, compromising the entire device.
-
High 7.5
Multiple vulnerabilities in Open5GS
Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF (Virtual Network Function), and triggering the ogs_sbi_me…
-
High 7.5
Multiple vulnerabilities in Open5GS
DOS vulnerability that could allow an attacker to register a new VNF (Virtual Network Function) value. This action could trigger the args_assets() function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to…
-
High 8.2CVE-2023-3350 Public exploit
Cryptographic Issues on IBERMATICA RPS
A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the password hashes code…
-
High 8.2
Information exposure on IBERMATICA RPS
Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to retrieve sensitive information, such as usernames, IP addresses or SQL queries sent to the application. By accessing the URL /RPS2019Service/s…
-
High 8.8
ByDemes Group Airspace CCTV Web Service Improper Access Control
The web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation vulnerability, detected in the Camera Control Panel, whose exploitation could allow a low-privileged attacker to gain administrator access.
-
High 8.8
SQL Injection on Jorani
An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low privileges, to send queries with malicious SQL code on the "/leaves/validate" path and the “id” parameter, managing to extr…
-
High 8.1
Improper Access Control in salesagility/suitecrm
Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1.
-
High 8.9
Cross-site Scripting (XSS) - Stored in salesagility/suitecrm
Cross-site Scripting (XSS) - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1.
-
High 8.8
Multiple vulnerabilities in IDM Sistemas QSige
QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into th…
-
High 8.8
Multiple vulnerabilities in IDM Sistemas QSige
QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.
-
High 8.8
Multiple vulnerabilities in IDM Sistemas QSige
The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.
-
High 8.1
Admin password reset in NetMan 204
All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.
-
High 7.6
Multiple vulnerabilities in IDM Sistemas QSige
The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.
-
High 8.8
Multiple vulnerabilities in IDM Sistemas QSige
It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application.
-
High 8.8
Multiple vulnerabilities in IDM Sistemas QSige
The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username.
-
High 8.8
A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windo…
-
High 7.8
A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versio…
-
High 7.5
Unauthenticated Remote Database Exfiltration
cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a dangerous methods, that allows to leak the database (system settings, user accounts,...). This vulnerability can be triggere…
-
High 8.4
Use After Free in Automotive Display
Memory corruption in Automotive Display while destroying the image handle created using connected display driver.
-
High 7.8
Buffer Copy Without Checking Size of Input in Audio
Memory corruption while invoking callback function of AFE from ADSP.
-
High 7.8
Signed-to-unsigned conversion error in Audio
Memory corruption while parsing the ADSP response command.
-
High 8.4
Use After Free in DSP Service
Memory corruption in DSP Service during a remote call from HLOS to DSP.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing rsn ies.
-
High 7.5
Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing a NAN management frame.
-
High 8.4
Improper Input Validation in HLOS
Memory Corruption in HLOS while registering for key provisioning notify.
-
High 7.8
Improper Validation of Array Index in HLOS
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
-
High 8.2
Buffer Over-read in Data Modem
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
-
High 8.2
Buffer Over-read in Data Modem
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
-
High 7.5
NULL pointer Dereference in Modem
Transient DOS in Modem while allocating DSM items.
-
High 8.4
Improper Access Control in Core
Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.
-
High 7.5
Reachable Assertion in Modem
Transient DOS in Modem while triggering a camping on an 5G cell.
-
High 8.2
Buffer Over-read in Data Modem
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
-
High 7.4
Improper Input Validation in Automotive
Weak configuration in Automotive while VM is processing a listener request from TEE.
-
High 8.7
Improper Access Control in Kernel
Improper Access to the VM resource manager can lead to Memory Corruption.
-
High 7.5
static-server Path Traversal vulnerability
All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js.
-
High 7.8
Use-after-free in Linux kernel's fs/smb/client component
A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead…