Archive
August 2024
Vulnerabilities first published in this month (UTC), newest first.
2,918 results · Feed
-
Medium 4.3
Apache CloudStack: Unauthorised Network List Access
In Apache CloudStack 4.19.1.0, a regression in the network listing API allows unauthorised list access of network details for domain admin and normal user accounts. This vulnerability compromises tenant isolation, potentially leading to unauthorised access to…
-
Medium 6.1
WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS
The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to execute stored cross-site scripting (XSS) attacks.
-
Medium 4.8
House Manager <= 1.0.8.4 - Reflected XSS
The House Manager WordPress plugin through 1.0.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
-
Critical 9.8
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker …
-
Medium 5.3
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to a…
-
High 8.8
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote att…
-
High 8.2
Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass authe…
-
Medium 5.0
Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to p…
-
Medium 4.0
Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to…
-
Medium 4.0
Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to acces…
-
Medium 4.0
Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker t…
-
Medium 4.0
Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local attacker to access…
-
Medium 4.0
Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthor…
-
Medium 5.5
Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potenti…
-
Medium 5.5
Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attacke…
-
Medium 5.5
Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local …
-
Medium 5.5
Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to p…
-
Medium 5.5
Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potent…
-
Medium 5.5
Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potenti…
-
Medium 5.5
Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to p…
-
Medium 5.5
Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potenti…
-
High 7.8
Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attacker…
-
High 7.8
Out-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows local attackers to potent…
-
Medium 5.5
Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to p…
-
High 8.4
Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileg…
-
High 7.5
Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary cod…
-
Medium 4.0
Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell relate…
-
Medium 4.0
Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to con…
-
Medium 5.1
Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attacker…
-
Medium 5.1
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption.
-
High 7.3
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.
-
Medium 4.0
Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive info…
-
High 7.3
Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrar…
-
Medium 5.1
Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive informat…
-
Medium 5.1
Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access pro…
-
Medium 6.2
Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictio…
-
Medium 6.2
Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restr…
-
Medium 6.2
Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restric…
-
Medium 6.2
Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrict…
-
Medium 6.2
Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restri…