Archive
6 December 2023
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
Low —
eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations
### Impact The eventing-github cluster-local server doesn't set `ReadHeaderTimeout` which could lead do a DDoS attack, where a large group of users send requests to the server causing the server to hang for long enough to deny it from being available to…
-
High 7.7
Argument Injection in FFmpeg codec parameters in Jellyfin
Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the `/Videos/<itemId>/stream` and `/Videos/<itemId>/stream.<container>` endpoints which are pr…
-
Medium 5.3
Quarkus: potential invalid reuse of context when @cacheresult on a uni is used
A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a pro…
-
Unscored —
Command 'go get' may unexpectedly fallback to insecure git in cmd/go
Using go get to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is not set for said module. This only affec…
-
Unscored —
Denial of service via chunk extensions in net/http
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically rea…
-
Unscored —
The Group module has the ability to make content private to specific groups. When viewing a list of entities, e.g. node…
-
High 7.5
Failure when uploading a Logo image file
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.
-
High 7.5CVE-2023-39539 Public exploit
Failure when uploading a Logo image file
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.
-
Unscored —
Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYL…
-
High 7.2
Administrator equivalent Filr user can access proxy administrator credentials
Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credentials of proxy administrators.
-
Medium 5.3
Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerab…
-
Unscored —
Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect serv…
-
Unscored —
Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affe…
-
High 7.5
Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affe…
-
Unscored —
Unauthorized access vulnerability in the Huawei Share module. Successful exploitation of this vulnerability may affect …
-
Unscored —
Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect …
-
Unscored —
Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerab…
-
Unscored —
Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect…
-
Unscored —
API permission control vulnerability in the network management module. Successful exploitation of this vulnerability ma…
-
High 7.5
Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful expl…
-
Unscored —
Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploite…
-
Unscored —
Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect use…
-
Medium 4.3
Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticat…
-
Unscored —
Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause…
-
Unscored —
Vulnerability of unauthorized file access in the Settings app. Successful exploitation of this vulnerability may cause …
-
Unscored —
Permission verification vulnerability in distributed scenarios. Successful exploitation of this vulnerability may affec…
-
Unscored —
Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privileg…
-
High 8.8
The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successf…
-
Medium 5.3
Public endpoint /metrics of Calls plugin reveals channel IDs
Mattermost is grouping calls in the /metrics endpoint by id and reports that id in the response. Since this id is the channelID, the public /metrics endpoint is revealing channelIDs.
-
High 7.1
Client side path traversal due to lack of route parameters validation
Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal.
-
High 8.8
An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version…
KEV Dec 21, 2023 -
Medium 6.0
Qemu: 9pfs: improper access control on special files
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a dev…
-
Critical 9.8CVE-2023-22523 EPSS 11%
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with…
-
Critical 9.6
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An at…
-
Critical 9.0CVE-2023-22522 EPSS 13%
This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject …
-
Medium 5.9
pubnub Insufficient Entropy vulnerability
Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions …
-
Medium 6.1
Email Subscription Popup <= 1.2.18 - Reflected Cross-Site Scripting
The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all versions up to, and including, 1.2.18 due to insufficient input sanitization and output escaping. This makes it possible for u…
-
Medium 5.3
Possible stack overflow due to insufficient input validation
Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 through 4.0.0.
-
Medium 5.0
HTML injection Vulnerability in Serv-U 15.4
A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.
-
Medium 6.5
Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to pot…