Archive
19 January 2024
Vulnerabilities first published on this day (UTC), newest first.
108 results · Feed
-
Medium 4.0
Client configured with permissive trust policies susceptible to rollback attack in Notary Project
The Notary Project is a set of specifications and tools intended to provide a cross-industry standard for securing software supply chains by using authentic container images and other OCI artifacts. An external actor with control of a compromised container re…
-
High —
SPV Merkle proof malleability allows the maintainer to prove invalid transactions
## Summary By publishing specially crafted transactions on the Bitcoin blockchain, the SPV maintainer can produce seemingly valid SPV proofs for fraudulent transactions. The issue was originally identified by Least Authority in the tBTC Bridge V2 Security Aud…
-
High 7.3
Hecheng Leadshop leadshop.php deserialization
A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Affected is an unknown function of the file /web/leadshop.php. The manipulation of the argument install leads to deserialization. It is possible to launch the attac…
-
Medium 6.3
个人开源 mldong DecisionModel.java ExpressionEngine code injection
A vulnerability, which was classified as critical, has been found in 个人开源 mldong 1.0. This issue affects the function ExpressionEngine of the file com/mldong/modules/wf/engine/model/DecisionModel.java. The manipulation leads to code injection. The attack may …
-
Medium 5.3CVE-2024-0737 Public exploit
Xlightftpd Xlight FTP Server Login denial of service
A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. Th…
-
Medium 5.3
Consensys Discovery Nonce Reuse
Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is expo…
-
Critical 9.1
FOLIO mod-data-export-spring Hard-Coded Credentials
Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.
-
Medium 5.3
DependencyCheck Debug Mode Logging of NVD API Key
DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.
-
Medium 5.3
FOLIO mod-remote-storage Hard Coded Credentials
Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.
-
High 8.8
ClickHouse Client Certificate Password Exposure
Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client…
-
Medium 5.3
EFS Easy File Sharing FTP Login denial of service
A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part of the component Login. The manipulation of the argument password leads to denial of service. It is possible to initiate the attack remotel…
-
Medium 6.3
SourceCodester Online Tours & Travels Management System expense.php exec sql injection
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. Affected by this issue is the function exec of the file admin/operations/expense.php. The manipulation leads to sql injection. The attack …
-
High 7.5
upokecenter CBOR Denial of Service
Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted …
-
High 8.2
Artemis Java Test Sandbox Libary Load Escape
Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the suppo…
-
Medium 6.5
Stored cross site scripting in Markdown Preview in JupyterLab
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicio…
-
High 8.2
Artemis Java Test Sandbox InvocationTargetException Subclass Escape
Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly san…
-
High 7.6
Potential authentication and CSRF tokens leak in JupyterLab
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens exposed to a third party…
-
Medium 5.3
AWS Encryption SDK for Java Improper Verification of Cryptographic Signature
AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.
-
High 7.5
SurrealDB vulnerable to Uncontrolled CPU Consumption via WebSocket Interface
SurrealDB depends on the `tungstenite` and `tokio-tungstenite` crates used by the `axum` crate, which handles connections to the SurrealDB WebSocket interface. On versions before `0.20.1`, the `tungstenite` crate presented an issue which allowed the parsing o…
-
Medium 6.3
Smsot get.php sql injection
A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely.…
-
Medium 6.3
Smsot HTTP POST Request api.php sql injection
A vulnerability was found in Smsot up to 2.12. It has been classified as critical. Affected is an unknown function of the file /api.php of the component HTTP POST Request Handler. The manipulation of the argument data[sign] leads to sql injection. It is possi…
-
Critical 9.8
Enonic XP Session Fixation Vulnerability
Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.
-
Medium 6.1
MolecularFaces XSS
MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.
-
High 8.2
Artemis Java Test Sandbox Class Loading Escape
Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed …
-
Medium 5.5
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use sys…
-
Medium 6.3
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical acc…
-
High 7.8
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integri…
-
Low 3.3
An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to ga…
-
Medium 6.8
A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications ac…
-
Medium 6.7
Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software…
-
Medium 6.7
Incorrect default permissions in some Intel Integrated Sensor Hub (ISH) driver for Windows 10 for Intel NUC P14E Laptop…
-
High 7.3
Improper access control in some Intel HotKey Services for Windows 10 for Intel NUC P14E Laptop Element software install…
-
Medium 6.7
Improper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to pote…
-
High 7.9
Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0…
-
High 7.5
Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potenti…
-
High 7.5
Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potenti…
-
High 7.5
Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potenti…
-
High 7.5
Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation …
-
High 7.5
Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially …
-
High 7.5
Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalati…