Archive
5 March 2024
Vulnerabilities first published on this day (UTC), newest first.
116 results · Feed
-
Medium —
eth-abi is vulnerable to recursive DoS
This is related to recent ZST stuff (https://github.com/ethereum/eth-abi/security/advisories/GHSA-rqr8-pxh7-cq3g), but it's a different one. Basically a recursive pointer issue ```py from eth_abi import decode payload = "00000000000000000000000000000000000000…
-
Critical 9.8
Authentication Bypass in ZKSoftware's UFace 5
Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass. This issue affects UFace 5: through 12022024.
-
Medium 6.1
Cross-Site Scripting vulnerability in TP-Link Archer AX50
Cross-Site Scripting (XSS) vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScrip…
-
Medium 5.6
A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid”…
-
Medium 5.5
A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionalit…
-
Medium 5.3
A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allo…
-
Medium 5.9
A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functi…
-
Medium 5.3
A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web appli…
-
Medium 5.9
A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” functionality of …
-
Medium 6.8
A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a…
-
Medium 6.8
A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handlin…
-
Medium 6.8
A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary bei…
-
High 7.5
A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a r…
-
Unscored —
crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ The commit referenced in the Fixes tag removed the 'break' from the else branch in qcom_rng_read(), causing an infinit…
-
High 8.1
crypto: qcom-rng - ensure buffer for generate is completely filled
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rng_alg expects that the destination buffer is completely filled if the function returns 0. …
-
High 7.5
A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web ap…
-
High 8.1
A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote …
-
Medium 4.1
Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local …
-
Low 3.8
Improper Management of Cryptographic Keys in the Maintenance Server in QCOW Air-Gapped Distribution (China Edition)
Maintenance Server, in Cybellum's QCOW air-gapped distribution (China Edition), versions 2.15.5 through 2.27, was compiled with a hard-coded private cryptographic key. An attacker with administrative privileges & access to the air-gapped server could potentia…
-
Medium 5.1
Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to ac…
-
Medium 5.7
Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02…
-
Medium 4.6
Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02…
-
Medium 6.8
Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbit…
-
Medium 5.3
Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allo…
-
Low 3.3
Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local at…
-
Medium 4.0
Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local att…
-
Low 3.3
The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to …
-
Medium 6.4
Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execu…
-
Medium 6.4
Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to exec…
-
Medium 5.3
Incorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to configure AppLock set…
-
Medium 5.4
Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers …
-
Medium 5.9
Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attacke…
-
Medium 6.2
Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Seri…
-
Medium 6.8
Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Cent…
-
Critical 9.1
Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are access…
-
Medium 5.3
JM Twitter Cards <= 14 - Information Exposure via Meta Description
The JM Twitter Cards plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 14 via the meta description data. This makes it possible for unauthenticated attackers to view password protected post content when viewing t…
-
Medium 5.3
Change Memory Limit <= 1.0 - Missing Authorization via admin_logic()
The Change Memory Limit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_logic() function hooked via admin_init in all versions up to, and including, 1.0. This makes it possible for unauthe…
-
High 8.8
Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection
The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.2 via deserialization of untrusted input via the vimeography_duplicate_gallery_serialized in the duplica…
-
Medium 6.5
Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure
The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.0. This makes it possible for authenticated attackers, with subscriber access an…
-
Medium 5.3
Password Protected Store for WooCommerce <= 2.2 - Information Exposure via REST API
The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data includ…