Archive
13 September 2024
Vulnerabilities first published on this day (UTC), newest first.
152 results · Feed
-
High 7.8
There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could l…
-
High 7.4
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. Thi…
-
High 7.4
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This c…
-
Medium 4.4
there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure wi…
-
High 7.4
In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. Thi…
-
High 7.4
there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privil…
-
High 7.6
BT: HCI: adv_ext_report Improper discarding in adv_ext_report
BT: HCI: adv_ext_report Improper discarding in adv_ext_report
-
High 7.6
BT: Classic: SDP OOB access in get_att_search_list
BT: Classic: SDP OOB access in get_att_search_list
-
High 7.6
BT:Classic: Multiple missing buf length checks
BT:Classic: Multiple missing buf length checks
-
Medium 6.3
BT: Unchecked user input in bap_broadcast_assistant
BT: Unchecked user input in bap_broadcast_assistant
-
Medium 6.8
BT: Missing length checks of net_buf in rfcomm_handle_data
BT: Missing length checks of net_buf in rfcomm_handle_data
-
High 8.2
BT: Encryption procedure host vulnerability
BT: Encryption procedure host vulnerability
-
Medium 6.3
QDocs Smart School Management System Chat mynewuser sql injection
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users[] with th…
-
Low 3.5
OpenTibiaBR MyAAC Post Reply new_post.php cross site scripting
A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown function of the file system/pages/forum/new_post.php of the component Post Reply Handler. The manipulation of the argument post_topic leads to c…
-
Medium 6.3
JFinalCMS edit delete path traversal
A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The …
-
Medium 6.7
An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSy…
-
Medium 6.3
A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LX…
-
Medium 4.3
A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface witho…
-
Medium 6.8
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker t…
-
High 7.2
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privi…
-
High 7.2
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privi…
-
High 7.2
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevat…
-
High 7.2
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevat…
-
Medium 4.3
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
-
Medium 6.8
A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to …
-
Medium 6.7
A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could …
-
Medium 6.7
A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attack…
-
Medium 5.6
The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the to…
-
Medium 6.3
The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes s…
-
Medium 6.7
The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the inp…
-
High 8.8
AutomationDirect DirectLogic H2-DM1E Session Fixation
The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as …
-
High 8.8
AutomationDirect DirectLogic H2-DM1E Authentication Bypass by Capture-replay
The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to maintain security. However, if an attacker captures this sessi…
-
High 7.4
Cross-Site Request Forgery (CSRF) in lunary-ai/lunary
A Cross-Site Request Forgery (CSRF) vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive CORS settings. This vulnerability allows an attacker to sign up for and create projects or use the instance as if they were a user with local …
-
Medium 4.3
Information Disclosure in lunary-ai/lunary
An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the `runs/{run_id}/related` endpoint. This endpoint does not verify that the user has the necessary access rights to the run(s) they are accessing. As a result, it returns…
-
Medium 6.5
Improper Access Control in lunary-ai/lunary
An improper access control vulnerability exists in lunary-ai/lunary at the latest commit (a761d83) on the main branch. The vulnerability allows an attacker to use the auth tokens issued by the 'invite user' functionality to obtain valid JWT tokens. These toke…
-
Medium 6.5
Broken Access Control in lunary-ai/lunary
A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user from one organization to update the Identity Provider (IDP) settings and view the SSO metadata of another organization. This vulnerability…
-
High 7.5
SSRF in berriai/litellm
A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to …
-
High 7.8
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (…
-
Medium 4.3
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_user_profile() function in all versions up to, and including, 4.15.3. This makes it p…
-
Medium 6.4
Neighborly <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
The Neighborly theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it pos…