Archive
15 February 2024
Vulnerabilities first published on this day (UTC), newest first.
103 results · Feed
-
Critical 9.8
In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to loca…
-
Medium 5.5
In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local informati…
-
High 7.4
In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local…
-
High 8.4
In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could…
-
Medium 5.1
In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…
-
Medium 5.5
In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission c…
-
Medium 6.2
In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This cou…
-
High 7.8
In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background du…
-
High 7.3CVE-2023-40109 Public exploit
In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions…
-
High 7.8
In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of sys…
-
High 8.4
In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This coul…
-
High 7.5
In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. Thi…
-
Medium 5.5
In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing p…
-
High 7.3
Path Manipulation in file mslib/index.py in MSS
MSS (Mission Support System) is an open source package designed for planning atmospheric research flights. In file: `index.py`, there is a method that is vulnerable to path manipulation attack. By modifying file paths, an attacker can acquire sensitive inform…
-
High 7.5
Improper Neutralization vulnerability affects OpenText ALM Octane.
Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote code execution attack.
-
High 8.8
Local privilege escalation vulnerability could affect OpenText Operations Agent on Non-Windows platforms.
Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on Non-Windows platforms. The vulnerability could allow local privilege escalation.
-
Critical 9.0
SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.
-
High 7.9
SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.
-
Critical 9.6
SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution.
-
High 8.0CVE-2024-23478 EPSS 82%
SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution.
-
Critical 9.6
SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.
-
Medium 6.5
Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.
-
Medium 6.1
Extension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.8
An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows …
-
Medium 5.3
Improper (D)TLS key boundary enforcement
wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was possible to combine (D)TLS messages using different keys into one (D)TLS record. The most extreme edge case is that, in (D)TLS 1.3, it was …
-
High 7.5
Hardcoded Credentals in SoliClub Mobile App
Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive Strings Within an Executable. This issue affects SoliPay Mobile App: before 5.0.8.
-
Critical 9.8
SQLi in Utarit's Smart Deposit System
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection. This issue affects SoliPay Mobile App: before 5.0.8.
-
High 7.5
Sensetive Data Exposure in Utarit's Soliclub
Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users. This issue affects SoliPay Mobile App: before 5.0.8.
-
Critical 9.8
SQLi in PosTahsil's Online Payment System
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online Payment System allows SQL Injection. This issue affects Online Payment System: before 14.02.2024.
-
Critical 9.8
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0…
KEV Oct 9, 2024 -
Medium 4.7
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version …
-
Medium 4.4
An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, …
-
High 7.9
An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, …
-
Medium 6.8
An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.…
-
Medium 5.4
Stored admin XSS via PayPal authentication certificate
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript …
-
Medium 4.9
Force high-usage of resources by generating unlimited coupons: Adobe Commerce
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. A high-privileged attacker could leverage this vulnerability to exhaust sy…
-
Medium 4.3
[Spain] CSRF to delete Requisition Lists at Adobe Commerce
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to trick a victim into performing …
-
Critical 9.1
[Adobe Commerce] Stored XSS from low privileged admin user on every admin page, bypassing CVE-2023-29297
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject malicious scripts into every admin page. Malicious JavaScript may be execute…
-
Critical 9.1
Command injection in data collector backup due to insufficient patching of CVE-2023-38208
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitati…
-
Critical 9.8
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability i…
-
High 7.3
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability i…