Archive
January 2024
Vulnerabilities first published in this month (UTC), newest first.
2,612 results · Feed
-
Medium 5.3
Nickname Disclosure on the Backend Automotive Server
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number.
-
Medium 6.6
Kernel: nf_tables: pointer math issue in nft_byteorder_eval()
A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so …
-
High 7.8
Xorg-x11-server: selinux context corruption
A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.
-
Medium 5.5
Xorg-x11-server: selinux unlabeled glx pbuffer
A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource t…
-
High 7.5
Progress Application Server (PAS) for OpenEdge Denial of Service
This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0 . An attacker who can produce a malformed web request may cause the crash of a PASOE agent pot…
-
Critical 9.1
Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal
This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to…
-
Medium 5.5
Kernel crash in EXT4 filesystem
Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.
-
Medium 5.5
NULL-ptr-deref in network sched
NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3.
-
Medium 6.1
Reflected XSS in Macroturk's Macro-Bel
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Macroturk Software and Internet Technologies Macro-Bel allows Reflected XSS. This issue affects Macro-Bel: before V.1.0.1.
-
Critical 9.1
IBM App Connect Enterprise denial of service
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a denial of service due to improper restriction of excessive authentication attempts. IBM X-Force ID: 2…
-
Critical 9.8
SQLi in Mergen Soft Quality Management System
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Injection. This issue affects Quality Management System: before v1.2.
-
Medium 6.3
Cross-Frame Scripting (XFS) on Plone CMS
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element.
-
Medium 5.4
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…
-
Medium 5.4
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…
-
Medium 6.5
Omission of key-controlled authorization in Qsige
Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerability allows an attacker to extract sensitive information from the API by making a request to the parameter '/qsige.locator/quotePrevious/cent…
-
Medium 6.4
WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 9.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes …
-
Medium 6.4
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'
The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the use of the 'tag' attribute in the wprm-recipe-name, wprm-recipe-date, and wprm-recipe-counter shortcodes in all versions up to, and including, 9.1.0. This makes it p…
-
Medium 6.1CVE-2023-6970 Scanner template
WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer
The WP Recipe Maker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘Referer' header in all versions up to, and including, 9.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate…
-
Critical 9.8
Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device'…
-
Medium 4.4
In drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o…
-
Medium 4.4
In autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local …
-
Medium 5.5
In telephone service, there is a possible improper input validation. This could lead to local information disclosure wi…
-
Medium 4.4
In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o…
-
Medium 4.4
In vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o…
-
Medium 4.4
In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o…
-
Medium 5.5
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 5.5
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 5.5
In phasecheckserver, there is a possible out of bounds write due to a missing bounds check. This could lead to local de…
-
Medium 4.4
In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with…
-
Medium 5.5
In video decoder, there is a possible improper input validation. This could lead to local denial of service with no add…
-
Medium 5.5
In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local de…
-
Medium 5.5
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local den…
-
Medium 5.5
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 5.5
In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local de…
-
Medium 5.5
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local den…
-
Medium 5.5
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local den…
-
Medium 4.4
In media service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 5.5
In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local de…
-
Medium 4.4
In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with Syste…
-
Medium 5.5
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local den…