Archive
5 April 2024
Vulnerabilities first published on this day (UTC), newest first.
38 results · Clear filters · Feed
-
Medium 5.3
A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer…
-
Medium 4.9
A denial of service vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in a syst…
-
Medium 4.9
A buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in denial o…
-
Medium 6.3
An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could all…
-
Medium 6.7
A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could a…
-
Medium 6.7
A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and T…
-
Medium 6.7
A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker …
-
Medium 6.5
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoin…
-
Medium 4.4
In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to loc…
-
Medium 5.5
In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could…
-
Medium 6.2
In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local in…
-
Medium 6.7
In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to loca…
-
Medium 5.9
In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local…
-
Medium 5.5
In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5
In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead …
-
Medium 5.5
In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could…
-
Medium 5.5
In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5CVE-2024-29745 Exploited
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure w…
KEV Apr 4, 2024 -
Medium 5.5
In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to l…
-
Medium 5.5
In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…
-
Medium 5.5
In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to lo…
-
Medium 5.9
In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 6.7
GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI sys…
-
Medium 5.9
libdav1d-sys affected by dav1d AV1 decoder integer overflow
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading to version 0.7.0 of libdav1d-sys, which includes dav1d 1.4.0.
-
Medium 6.3CVE-2024-3346 EPSS 49%
Byzoro Smart S80 webmailattach.php os command injection
A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mail_file_path leads to os command injection. The atta…
-
Medium 5.3
h2 servers vulnerable to degradation of service with CONTINUATION Flood
An attacker can send a flood of CONTINUATION frames, causing `h2` to process them indefinitely. This results in an increase in CPU usage. Tokio task budget helps prevent this from a complete denial-of-service, as the server can still respond to legitimate req…
-
Medium 4.6
XSS in graph rendering
Stored XSS in graph rendering in Checkmk <2.3.0b4.
-
Medium 6.4
Squelch Tabs and Accordions Shortcodes <= 0.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via accordions Shortcode
The Squelch Tabs and Accordions Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'accordions' shortcode in all versions up to, and including, 0.4.3 due to insufficient input sanitization and output escaping on user…
-
Medium 5.3
WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink
WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publicly_queryable' post …
-
Medium 6.5
Mattermost fails to authenticate the source of certain types of post actions
Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2 fail to authenticate the source of certain types of post actions, allowing an authenticated attacker to create posts as other users via a crafted post acti…
-
Medium 4.7
Invite ID available to team admins even without the "Add Members" permission
Improper Access Control in Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 lacked proper access control in the `/api/v4/users/me/teams` endpoint allowing a team admin to get the invite ID of their tea…
-
Medium 4.3
DoS via a large number of User Preferences
Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 don't limit the number of user preferences which allows an attacker to send a large number of user preferences potentially causing denial of service.
-
Medium 6.5
Gutenberg Blocks by Kadence Blocks < 3.2.26 - Contributor+ Stored XSS
The Gutenberg Blocks by Kadence Blocks WordPress plugin before 3.2.26 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to pe…
-
Medium 4.3
Truncated port name
Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports …
-
Medium 6.8CVE-2023-49965 Public exploit
SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page.
-
Medium 5.9
In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root pass…
-
Medium 5.9
LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, an…
-
Medium 6.2
Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomB…