Archive
11 March 2024
Vulnerabilities first published on this day (UTC), newest first.
91 results · Feed
-
Critical 9.1
NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting
NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP e…
-
High 7.1
Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex
phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was…
-
Low 2.6
Sensitive Information Disclosure (JailID) to users in Collabora Online
Collabora Online is a collaborative online office suite based on LibreOffice technology. Each document in Collabora Online is opened by a separate "Kit" instance in a different "jail" with a unique directory "jailID" name. For security reasons, this directory…
-
Medium 4.3
Mollie Forms <= 2.6.3 - Missing Authorization
The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subs…
-
Medium 4.3
Mollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post Duplication
The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with …
-
Medium 6.3
Nix Corruption of fixed-output derivations
Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host (or another fixed-output derivation) via Unix domain sockets in the abstr…
-
Medium 5.3
SMTP Smuggling in Postal
Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to…
-
Medium 6.5
API key leak in codeium-chrome
codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn't check the sender when receiving an external message. This allows an attacker to host a website that will steal the u…
-
High 7.2
OS Command Injection Vulnerability in SOY CMS
SOY CMS is an open source CMS (content management system) that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrato…
-
High 7.5
Account Takeover via Session Fixation in Zitadel [Bypassing MFA]
Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent (browser) and its user sessions. Although the cookie was handled according to best practices, it was accessible on subdomains of the ZITADEL instance. An at…
-
Medium 6.5
IKEv2 misconfiguration can cause libreswan to abort and restart
The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a con…
-
Medium 4.6
XML external entity (XXE) injection in OpenOLAT
OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manually manipulating http requests when using the draw.io integration it is possible to read arbitrary files as the configured system user and S…
-
High 8.4
In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local e…
-
Medium 5.5
In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This…
-
Medium 5.5
In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to loc…
-
High 7.8
In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to…
-
Critical 9.8
A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues
-
Medium 5.1
In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to …
-
High 8.4
In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
Medium 5.9
In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…
-
High 7.5
In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing nul…
-
Critical 9.8
there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no…
-
Medium 5.1
In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a …
-
High 8.4
In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local…
-
High 7.8
In update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to lo…
-
Medium 4.4
In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could…
-
High 8.4
In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead …
-
High 7.8
In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to loca…
-
High 7.8
In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due t…
-
High 8.4
In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This co…
-
High 7.8
In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
Medium 6.2
In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local…
-
High 7.7
In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to loc…
-
High 7.8
In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to loc…
-
High 8.4
there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege…
-
High 8.4
there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…
-
High 7.5
there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure …
-
High 8.4
there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…
-
High 8.4
In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead …
-
Critical 9.1
Exported broadcast receivers allowing malicious apps to bypass broadcast protection.