Archive
2 January 2024
Vulnerabilities first published on this day (UTC), newest first.
44 results · Clear filters · Feed
-
Medium 6.3
Magic-Api code injection
A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched rem…
-
Medium 5.9
Erroneous handling of `record_external_operation` error return
Rust EVM is an Ethereum Virtual Machine interpreter. In `rust-evm`, a feature called `record_external_operation` was introduced, allowing library users to record custom gas changes. This feature can have some bogus interactions with the call stack. In particu…
-
Medium 5.4
XSS can be stored in DB from "add a message form" in order detail page (FO)
PrestaShop is an open-source e-commerce platform. Prior to version 8.1.3, the isCleanHtml method is not used on this this form, which makes it possible to store a cross-site scripting payload in the database. The impact is low because the HTML is not interpre…
-
Medium 6.3
spider-flow FunctionController.java FunctionService.saveFunction code injection
A vulnerability, which was classified as critical, was found in spider-flow 0.4.3. Affected is the function FunctionService.saveFunction of the file src/main/java/org/spiderflow/controller/FunctionController.java. The manipulation leads to code injection. It …
-
Medium 6.3
CodeAstro Internet Banking System Profile Picture pages_account.php unrestricted upload
A vulnerability, which was classified as critical, has been found in CodeAstro Internet Banking System up to 1.0. This issue affects some unknown processing of the file pages_account.php of the component Profile Picture Handler. The manipulation leads to unre…
-
Medium 6.1
OWASP.AntiSamy mXSS when preserving comments
OWASP AntiSamy .NET is a library for performing cleansing of HTML coming from untrusted sources. Prior to version 1.2.0, there is a potential for a mutation cross-site scripting (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanit…
-
Medium 5.7
`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the `FamStructWrapper::deserialize` implementation provided by the crate for `…
-
Medium 6.3
RRJ Nueva Ecija Engineer Online Portal Add Downloadable downloadable.php unrestricted upload
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file downloadable.php of the component Add Downloadable. The manipulation leads to unr…
-
Medium 6.7
The logic of get apk path in KernelSU module can be bypassed
KernelSU is a Kernel-based root solution for Android devices. In versions 0.7.1 and prior, the logic of get apk path in KernelSU kernel module can be bypassed, which causes any malicious apk named `me.weishu.kernelsu` get root permission. If a KernelSU module…
-
Medium 5.3
RRJ Nueva Ecija Engineer Online Portal file information disclosure
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/uploads/. The manipulation leads to file and directory information exposure. It is possible to l…
-
Medium 5.5
Kernel: refcount leak in ctnetlink_create_conntrack()
A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.
-
Medium 4.3
Details of archived public channels are leaked to members of another team
Mattermost fails to properly verify the permissions needed for viewing archived public channels, allowing a member of one team to get details about the archived public channels of another team via the GET /api/v4/teams/<team-id>/channels/deleted endpoint.
-
Medium 4.3
Keywords that trigger mentions are leaked to other users
Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel.
-
Medium 4.9
Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF are enabled. This could …
-
Medium 4.0
multimedia audio has a UAF vulnerability
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer.
-
Medium 4.0
multimedia player has a UAF vulnerability
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
-
Medium 4.0
multimedia player has a UAF vulnerability
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
-
Medium 4.0
multimedia camera has a UAF vulnerability
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.
-
Medium 6.7
Integer Overflow or Wraparound in Radio Interface Layer
Memory corruption while receiving a message in Bus Socket Transport Server.
-
Medium 6.7
Double Free in Data Network Stack & Connectivity
Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.
-
Medium 5.5
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds r…
-
Medium 6.7
In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to loca…
-
Medium 5.5
In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local info…
-
Medium 5.9
In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of se…
-
Medium 6.7
In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local esc…
-
Medium 6.7
In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
Medium 6.7
In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of…
-
Medium 4.4
In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information…
-
Medium 4.4
In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local informat…
-
Medium 6.7
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 4.4
In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local informat…
-
Medium 6.7
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 4.4
In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local infor…
-
Medium 4.4
In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local infor…
-
Medium 6.7
In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Medium 4.7
RRJ Nueva Ecija Engineer Online Portal Avatar dasboard_teacher.php unrestricted upload
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file dasboard_teacher.php of the component Avatar Handler. The manipulation leads to unrestricted upload.…
-
Medium 5.9
An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF…
-
Medium 5.3
An issue in A-WORLD OIRASE BEER_waiting Line v.13.6.1 allows attackers to send crafted notifications via leakage of the…
-
Medium 5.5
Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr…