US-CERT Bulletin (SB22-171):Vulnerability Summary for the Week of June 13, 2022

Bulletins provide weekly summaries of new vulnerabilities. Patch information is provided when available.

The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

Vulnerabilities are based on the Common Vulnerabilities and Exposures (CVE) vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

  • High: vulnerabilities with a CVSS base score of 7.0–10.0
  • Medium: vulnerabilities with a CVSS base score of 4.0–6.9
  • Low: vulnerabilities with a CVSS base score of 0.0–3.9

Entries may include additional information provided by organizations and efforts sponsored by CISA. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletin is compiled from external, open-source reports and is not a direct result of CISA analysis.

 

High Vulnerabilities

Primary
Vendor — Product
Description Published CVSS Score Source & Patch Info
citrix — application_delivery_management Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted. 2022-06-16 7.8 CVE-2022-27511
MISC
convert-svg_project — convert-svg The package convert-svg-core before 0.6.4 are vulnerable to Directory Traversal due to improper sanitization of SVG tags. Exploiting this vulnerability is possible by using a specially crafted SVG file. 2022-06-10 7.5 CVE-2022-24278
CONFIRM
CONFIRM
CONFIRM
CONFIRM
dell — supportassist_for_business_pcs Dell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist Client Commercial versions (3.2.0 and versions prior) contain a privilege escalation vulnerability. A non-admin user can exploit the vulnerability and gain admin access to the system. 2022-06-10 7.2 CVE-2022-29092
CONFIRM
dell — supportassist_for_business_pcs Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability under specific conditions leading to execution of malicious code on a vulnerable system. 2022-06-10 7.6 CVE-2022-29095
CONFIRM
dynamicvision — dynamicmarkt dynamicMarkt <= 3.10 is affected by SQL injection in the parent parameter of index.php. 2022-06-10 7.5 CVE-2021-41754
MISC
MISC
dynamicvision — dynamicmarkt dynamicMarkt <= 3.10 is affected by SQL injection in the kat1 parameter of index.php. 2022-06-10 7.5 CVE-2021-41755
MISC
MISC
dynamicvision — dynamicmarkt dynamicMarkt <= 3.10 is affected by SQL injection in the kat parameter of index.php. 2022-06-10 7.5 CVE-2021-41756
MISC
MISC
gatsbyjs — gatsby The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploiting this vulnerability is possible when passing input in both webpack (MDX files in src/pages or MDX file imported as a component in frontend / React code) and data mode (querying MDX nodes via GraphQL). Workaround: If an older version of gatsby-plugin-mdx must be used, input passed into the plugin should be sanitized ahead of processing. 2022-06-10 7.5 CVE-2022-25863
CONFIRM
CONFIRM
CONFIRM
CONFIRM
git-promise_project — git-promise All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior [vulnerability](https://security.snyk.io/vuln/SNYK-JS-GITPROMISE-567476) in this package. **Note:** Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue. 2022-06-10 7.5 CVE-2022-24376
CONFIRM
CONFIRM
huawei — cv81-wdm_firmware There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability may lead to privilege escalation. 2022-06-13 10 CVE-2022-29797
MISC
huawei — cv81-wdm_firmware There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause denial of service. 2022-06-13 7.8 CVE-2022-29798
MISC
huawei — flmg-10_firmware There is an improper authentication vulnerability in FLMG-10 10.0.1.0(H100SP22C00). Successful exploitation of this vulnerability may lead to a control of the victim device. 2022-06-13 7.2 CVE-2022-22259
MISC
ideaco — idealms IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname. 2022-06-10 7.5 CVE-2022-31788
MISC
MISC
iqonic — kivicare The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the get_doctor_details route, leading to SQL Injections exploitable by unauthenticated users 2022-06-13 7.5 CVE-2022-0786
MISC
memberhero — member_hero The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter in an AJAX action, allowing unauthenticated users to call arbitrary PHP functions with no arguments. 2022-06-13 7.5 CVE-2022-0885
MISC
nystudio107 — seomatic In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution. 2022-06-12 7.5 CVE-2021-41749
MISC
MISC
phplist — phplist A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component Edit Subscription. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-10 7.5 CVE-2017-20029
MISC
MISC
phplist — phplist A vulnerability was found in PHPList 3.2.6. It has been rated as critical. Affected by this issue is some unknown functionality of the component Subscription. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-10 7.5 CVE-2017-20032
MISC
MISC
presspage — bestbooks The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users 2022-06-13 7.5 CVE-2022-0827
MISC
realvnc — vnc_server RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM. 2022-06-10 7.2 CVE-2022-27502
MISC
MISC
sicunet — access_control A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely. 2022-06-11 7.5 CVE-2017-20039
N/A
N/A
sicunet — access_control A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is some unknown functionality of the file card_scan_decoder.php. The manipulation of the argument No/door leads to privilege escalation. The attack may be launched remotely. 2022-06-11 7.5 CVE-2017-20038
N/A
N/A
tendacn — ac18_firmware Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac. 2022-06-14 10 CVE-2022-31446
MISC
vim — vim Use After Free in GitHub repository vim/vim prior to 8.2. 2022-06-10 7.5 CVE-2022-2042
CONFIRM
MISC
Back to top

 

Medium Vulnerabilities

Primary
Vendor — Product
Description Published CVSS Score Source & Patch Info
alibaba — fastjson The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote servers. Workaround: If upgrading is not possible, you can enable [safeMode](https://github.com/alibaba/fastjson/wiki/fastjson_safemode). 2022-06-10 6.8 CVE-2022-25845
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
artbees — jupiter_x_core Vulnerable versions of the JupiterX Theme (<=2.0.6) allow any logged-in user, including subscriber-level users, to access any of the functions registered in lib/api/api/ajax.php, which also grant access to the jupiterx_api_ajax_ actions registered by the JupiterX Core Plugin (<=2.0.6). This includes the ability to deactivate arbitrary plugins as well as update the theme’s API key. 2022-06-13 5.5 CVE-2022-1656
MISC
axiosys — bento4 An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp. 2022-06-10 4.3 CVE-2022-31287
MISC
axiosys — bento4 Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175. 2022-06-10 4.3 CVE-2022-31282
MISC
axiosys — bento4 An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h. 2022-06-10 4.3 CVE-2022-31285
MISC
byonepress — social_locker The OnePress Social Locker WordPress plugin through 5.6.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack 2022-06-13 4.3 CVE-2022-1608
MISC
citrix — application_delivery_management Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM. 2022-06-16 5 CVE-2022-27512
MISC
combodo — itop ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php. 2022-06-10 4.3 CVE-2022-31402
MISC
MISC
MISC
convert-svg-core_project — convert-svg-core The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG file. An attacker can read arbitrary files from the file system and then show the file content as a converted PNG file. 2022-06-10 6.8 CVE-2022-24429
CONFIRM
CONFIRM
CONFIRM
couchbase — sync_gateway An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, the admin credentials provided to the Admin REST API are ignored, resulting in privilege escalation for unauthenticated users. The Public REST API is not impacted by this issue. A workaround is to replace X.509 certificate based authentication with Username and Password authentication inside the bootstrap configuration. 2022-06-10 6.8 CVE-2022-32563
MISC
MISC
email_users_project — email_users The Email Users WordPress plugin through 4.8.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and change the notification settings of arbitrary users 2022-06-13 4.3 CVE-2022-1605
MISC
enqueue_anything_project — enqueue_anything The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. As a result, low privilege users such as subscriber could delete arbitrary assets, as well as put arbitrary posts in the trash. 2022-06-13 4 CVE-2021-25116
MISC
generex — rccmd Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitrary file on the server via unspecified vectors. 2022-06-13 5.5 CVE-2022-26041
MISC
MISC
gtm4wp — google_tag_manager The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is ~/public/frontend.php and this could be exploited by unauthenticated attackers. 2022-06-13 4.3 CVE-2022-1707
MISC
MISC
MISC
MISC
gunet — open_eclass_platform GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter. 2022-06-11 4.3 CVE-2021-44266
MISC
MISC
MISC
guzzlephp — guzzle Guzzle is an open source PHP HTTP client. In affected versions `Authorization` headers on requests are sensitive information. On making a request using the `https` scheme to a server which responds with a redirect to a URI with the `http` scheme, we should not forward the `Authorization` header on. This is much the same as to how we don’t forward on the header if the host changes. Prior to this fix, `https` to `http` downgrades did not result in the `Authorization` header being removed, only changes to the host. Affected Guzzle 7 users should upgrade to Guzzle 7.4.4 as soon as possible. Affected users using any earlier series of Guzzle should upgrade to Guzzle 6.5.7 or 7.4.4. Users unable to upgrade may consider an alternative approach which would be to use their own redirect middleware. Alternately users may simply disable redirects all together if redirects are not expected or required. 2022-06-10 5 CVE-2022-31043
CONFIRM
MISC
MISC
CONFIRM
guzzlephp — guzzle Guzzle is an open source PHP HTTP client. In affected versions the `Cookie` headers on requests are sensitive information. On making a request using the `https` scheme to a server which responds with a redirect to a URI with the `http` scheme, or on making a request to a server which responds with a redirect to a a URI to a different host, we should not forward the `Cookie` header on. Prior to this fix, only cookies that were managed by our cookie middleware would be safely removed, and any `Cookie` header manually added to the initial request would not be stripped. We now always strip it, and allow the cookie middleware to re-add any cookies that it deems should be there. Affected Guzzle 7 users should upgrade to Guzzle 7.4.4 as soon as possible. Affected users using any earlier series of Guzzle should upgrade to Guzzle 6.5.7 or 7.4.4. Users unable to upgrade may consider an alternative approach to use your own redirect middleware, rather than ours. If you do not require or expect redirects to be followed, one should simply disable redirects all together. 2022-06-10 5 CVE-2022-31042
CONFIRM
MISC
MISC
CONFIRM
hc_custom_wp-admin_url_project — hc_custom_wp-admin_url The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request 2022-06-13 5 CVE-2022-1595
MISC
huawei — harmonyos The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability. 2022-06-13 4.9 CVE-2022-31763
MISC
MISC
huawei — harmonyos The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity. 2022-06-13 5 CVE-2021-46812
MISC
MISC
huawei — magic_ui Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability. 2022-06-13 5 CVE-2021-46815
MISC
huawei — magic_ui The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. 2022-06-13 5 CVE-2021-46814
MISC
MISC
huawei — magic_ui The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation. 2022-06-13 4.6 CVE-2022-31762
MISC
MISC
huawei — magic_ui Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features. 2022-06-13 5 CVE-2022-31754
MISC
huawei — magic_ui The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability. 2022-06-13 4.9 CVE-2022-31751
MISC
MISC
huawei — magic_ui Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality. 2022-06-13 5 CVE-2022-31761
MISC
ibm — spectrum_copy_data_management IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 225887. 2022-06-10 6.8 CVE-2022-22479
XF
CONFIRM
ibm — spectrum_copy_data_management IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system. IBM X-Force ID: 228219. 2022-06-10 5 CVE-2022-31769
XF
CONFIRM
jpeg — libjpeg There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan. 2022-06-10 4.3 CVE-2022-32978
MISC
MISC
jpeg-js_project — jpeg-js The package jpeg-js before 0.4.4 are vulnerable to Denial of Service (DoS) where a particular piece of input will cause to enter an infinite loop and never return. 2022-06-10 5 CVE-2022-25851
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
kuroit — advanced_admin_search The Advanced Admin Search WordPress plugin before 1.1.6 does not sanitize and escape some parameters before outputting them back in an admin page, leading to a Reflected Cross-Site Scripting. 2022-06-13 4.3 CVE-2022-0626
MISC
latest_tweets_widget_project — latest_tweets_widget The Latest Tweets Widget WordPress plugin through 1.1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack 2022-06-13 4.3 CVE-2022-1624
MISC
lighttpd — lighttpd Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers. 2022-06-11 5 CVE-2022-30780
MISC
MISC
MISC
MISC
likebtn — like_button_rating The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body 2022-06-13 4 CVE-2022-0745
MISC
mailerlite — mailerlite_signup_forms The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting 2022-06-13 4.3 CVE-2022-1604
MISC
money_transfer_management_system_project — money_transfer_management_system A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privileges to the Admin role via any URL. 2022-06-10 6.5 CVE-2021-44582
MISC
MISC
navetti — pricepoint A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-13 6.8 CVE-2017-20045
MISC
MISC
navetti — pricepoint A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection (Blind). The attack can be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-13 6.5 CVE-2017-20042
MISC
MISC
netwavepr — indoor_ip_camera_firmware There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration (e.g., username and password). 2022-06-10 5 CVE-2018-17240
MISC
MISC
MISC
nystudio107 — seomatic A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of a malicious web page / file and fileName parameter containing an arbitrary filename with the intended content-type to be rendered in the user’s browser as the extension. 2022-06-12 4.3 CVE-2021-41750
MISC
MISC
MISC
octopus — octopus_deploy In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space. 2022-06-13 4.3 CVE-2022-2013
MISC
phplist — phplist A vulnerability was found in PHPList 3.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument sortby with the input password leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-10 4 CVE-2017-20031
MISC
MISC
phplist — phplist A vulnerability was found in PHPList 3.2.6. It has been classified as critical. Affected is an unknown function of the file /lists/admin/ of the component Sending Campain. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-10 6.5 CVE-2017-20030
MISC
MISC
phplist — phplist A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argument page with the input send\’\”;><script>alert(8)</script> leads to cross site scripting (Reflected). It is possible to initiate the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-10 4.3 CVE-2017-20033
MISC
MISC
posix_project — posix This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable (not a function), and then it will crash with type-check. 2022-06-10 5 CVE-2022-21211
CONFIRM
premierethemes — log_wp_mail The Log WP_Mail WordPress plugin through 0.1 saves sent email in a publicly accessible directory using predictable filenames, allowing any unauthenticated visitor to obtain potentially sensitive information like generated passwords. 2022-06-13 5 CVE-2022-1412
MISC
sicunet — access_control A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to privilege escalation. The attack can be launched remotely. 2022-06-11 6.5 CVE-2017-20037
N/A
N/A
simple-membership-plugin — simple_membership The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting 2022-06-13 4.3 CVE-2022-1724
MISC
thalesgroup — safenet_keysecure Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed. 2022-06-10 4 CVE-2021-42811
MISC
thedaylightstudio — fuel_cms A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4. 2022-06-10 6.8 CVE-2021-44117
MISC
MISC
themify — woocommerce_product_filter Themify WordPress plugin before 1.3.8 does not sanitise and escape the page parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting 2022-06-13 4.3 CVE-2022-1532
MISC
usabilitydynamics — wp-crm The WP-CRM WordPress plugin through 1.2.1 does not validate and sanitise fields when exporting people to a CSV file, leading to a CSV injection vulnerability. 2022-06-13 6.8 CVE-2022-1202
MISC
useful_banner_manager_project — useful_banner_manager The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form. 2022-06-13 4.3 CVE-2022-1694
MISC
veronalabs — wp_statistics Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product. 2022-06-13 4.3 CVE-2022-27231
MISC
MISC
MISC
webriti — webriti_smtp_mail The Webriti SMTP Mail WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack 2022-06-13 4.3 CVE-2022-1612
MISC
wp_svg_icons_project — wp_svg_icons The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution. 2022-06-13 6.5 CVE-2022-0863
MISC
xgenecloud — nocodb Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nocodb/nocodb prior to 0.91.7+. 2022-06-13 5 CVE-2022-2062
MISC
CONFIRM
zeroshell — zeroshell ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands. 2022-06-11 6.5 CVE-2021-41738
MISC
Back to top

 

Low Vulnerabilities

Primary
Vendor — Product
Description Published CVSS Score Source & Patch Info
ceikay — carousel_ck The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide’s descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed 2022-06-13 3.5 CVE-2022-1336
MISC
ceikay — slideshow_ck The Slideshow CK WordPress plugin before 1.4.10 does not sanitize and escape Slide’s descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed 2022-06-13 3.5 CVE-2022-1335
MISC
dell — supportassist_for_business_pcs Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issue and delete arbitrary files on the system. 2022-06-10 3.6 CVE-2022-29093
CONFIRM
dell — supportassist_for_business_pcs Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion/overwrite vulnerability. Authenticated non-admin user could exploit the issue and delete or overwrite arbitrary files on the system. 2022-06-10 3.6 CVE-2022-29094
CONFIRM
dolibarr — dolibarr Cross-site Scripting (XSS) – Stored in GitHub repository dolibarr/dolibarr prior to 16.0. 2022-06-13 3.5 CVE-2022-2060
MISC
CONFIRM
dwbooster — appointment_hour_booking The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. 2022-06-13 3.5 CVE-2022-1710
MISC
flatcore — flatcore-cms flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the “Create New Page” option through the index page. 2022-06-13 3.5 CVE-2021-40902
MISC
helpdeskz — helpdeskz A cross-site scripting (XSS) vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field. 2022-06-13 3.5 CVE-2022-31400
MISC
helpdeskz — helpdeskz A cross-site scripting (XSS) vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field. 2022-06-13 3.5 CVE-2022-31398
MISC
huawei — magic_ui AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability. 2022-06-13 2.1 CVE-2022-31759
MISC
MISC
huawei — magic_ui The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality. 2022-06-13 2.1 CVE-2022-31756
MISC
MISC
huawei — magic_ui The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability. 2022-06-13 2.1 CVE-2022-31755
MISC
MISC
huawei — magic_ui Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality. 2022-06-13 2.1 CVE-2022-31752
MISC
ibm — spectrum_copy_data_management IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from within IBM Spectrum Copy Data Management to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 227363. 2022-06-10 3.5 CVE-2022-30610
XF
CONFIRM
ibm — spectrum_copy_data_management IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session management. An attacker could exploit this vulnerability to bypass authentication and gain unauthorized access to the Spectrum Copy Data Management catalog which contains metadata. IBM X-Force ID: 223718. 2022-06-10 2.1 CVE-2022-22426
XF
CONFIRM
ibm — spectrum_copy_data_management IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using some fields of the form in the portal UI to inject malicious script into a Web page which would be executed in a victim’s Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials. IBM X-Force ID: 227364. 2022-06-10 3.5 CVE-2022-30611
XF
CONFIRM
intelliants — subrion_cms An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute. 2022-06-11 3.5 CVE-2021-41502
MISC
lepin_ep-kp001_project — lepinep-kp001_firmware Due to an insecure design, the Lepin EP-KP001 flash drive through KP001_V19 is vulnerable to an authentication bypass attack that enables an attacker to gain access to the stored encrypted data. Normally, the encrypted disk partition with this data is unlocked by entering the correct passcode (6 to 14 digits) via the keypad and pressing the Unlock button. This authentication is performed by an unknown microcontroller. By replacing this microcontroller on a target device with one from an attacker-controlled Lepin EP-KP001 whose passcode is known, it is possible to successfully unlock the target device and read the stored data in cleartext. 2022-06-10 2.1 CVE-2022-29948
MISC
FULLDISC
navetti — pricepoint A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting (Persistent). The attack may be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-13 3.5 CVE-2017-20043
MISC
MISC
navetti — pricepoint A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to basic cross site scripting (Reflected). It is possible to initiate the attack remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-13 3.5 CVE-2017-20044
MISC
MISC
phplist — phplist A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the file /lists/admin/ of the component List Name. The manipulation leads to cross site scripting (Persistent). The attack can be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-10 3.5 CVE-2017-20034
MISC
MISC
phplist — phplist A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of the component Subscribe. The manipulation leads to cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-10 3.5 CVE-2017-20035
MISC
MISC
phplist — phplist A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ of the component Bounce Rule. The manipulation leads to cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-10 3.5 CVE-2017-20036
MISC
MISC
sicunet — access_control A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement. 2022-06-11 2.1 CVE-2017-20040
N/A
N/A
ultimatemember — ultimate_member The Ultimate Member plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Biography field featured on individual user profile pages due to insufficient input sanitization and output escaping that allows users to encode malicious web scripts with HTML encoding that is reflected back on the page. This affects versions up to, and including, 2.3.2. Please note this issue was partially fixed in version 2.3.2 then subsequently fully patched in version 2.3.3. 2022-06-13 3.5 CVE-2022-1208
MISC
MISC
MISC
wp_athletics_project — wp_athletics The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor does it escape the values when outputting them back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability. 2022-06-13 3.5 CVE-2022-1549
MISC
Back to top

 

Severity Not Yet Assigned

Primary
Vendor — Product
Description Published CVSS Score Source & Patch Info

adobe — indesign
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30658
MISC

zzcms — zzcms
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dl_sendmail.php (when the attacker has admin authority) via the id parameter. 2022-06-17 not yet calculated CVE-2019-12353
MISC
1password — agilebits
 
An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with the 1Password service. 2022-06-15 not yet calculated CVE-2022-32550
MISC
acunetix — sonatype_nexus_repository_manager
 
https://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3.37.3-02 is affected by: Incorrect Access Control. The impact is: Authentication Bypass (remote). The component is: Admin Panel. The attack vector is: With the help of response manipulation Attacker can bypass the login panel and view the dashboard menus, No user interaction is required. ¶¶ 1. Go to https://nexus.e-goi.com 2. Click on the Sign In button. 3. Enter the password as admin:admin. 4. Intercept the request in Burp Suite. 5. Capture the Response of the Request. 6. Change the Status Code from 403 Forbidden to 200 OK. 7. You will see the dashboard which provides the admin access. 2022-06-14 not yet calculated CVE-2022-31289
MISC
MISC
adaware — protect
 
Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path. 2022-06-16 not yet calculated CVE-2022-31464
MISC
MISC
adobe — after_effects
 
Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. 2022-06-15 not yet calculated CVE-2021-43755
MISC
adobe — bridge Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28843
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28847
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28844
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28850
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28849
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28848
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28839
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28846
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28845
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28841
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28840
MISC
adobe — bridge
 
Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-28842
MISC
adobe — illustrator
 
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-30668
MISC
adobe — illustrator
 
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-30669
MISC
adobe — illustrator
 
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-30666
MISC
adobe — illustrator
 
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-30667
MISC
adobe — indesign Access of Memory Location After End of Buffer (CWE-788 2022-06-15 not yet calculated CVE-2021-40727
MISC
adobe — lightroom_classic
 
Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability. 2022-06-15 not yet calculated CVE-2021-40776
MISC
adobe — media_encoder
 
Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file. 2022-06-13 not yet calculated CVE-2021-46818
MISC
adobe — media_encoder
 
Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file. 2022-06-13 not yet calculated CVE-2021-46817
MISC
adobe — photoshop
 
Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. 2022-06-15 not yet calculated CVE-2021-42735
MISC
adobe — prelude
 
Adobe Prelude version 22.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. 2022-06-15 not yet calculated CVE-2021-43754
MISC
adobe — premiere_pro
 
Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file. 2022-06-13 not yet calculated CVE-2021-46816
MISC
adobe — animate
 
Adobe Animate version 22.0.5 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30664
MISC
adobe — illustrator Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-30647
MISC
adobe — illustrator Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-30649
MISC
adobe — illustrator Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2022-30648
MISC
adobe — incopy Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30656
MISC
adobe — incopy Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30655
MISC
adobe — incopy Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30652
MISC
adobe — incopy Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30651
MISC
adobe — incopy
 
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30653
MISC
adobe — incopy
 
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30650
MISC
adobe — incopy
 
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30657
MISC
adobe — incopy
 
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30654
MISC
adobe — indesign Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30665
MISC
adobe — indesign Access of Memory Location After End of Buffer (CWE-788) 2022-06-15 not yet calculated CVE-2021-42732
MISC
adobe — indesign Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30661
MISC
adobe — indesign Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30663
MISC
adobe — indesign Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30662
MISC
adobe — indesign
 
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30660
MISC
adobe — indesign
 
Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. 2022-06-15 not yet calculated CVE-2021-39820
MISC
adobe — indesign
 
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-16 not yet calculated CVE-2022-30659
MISC
adobe — media_encoder
 
Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2022-06-15 not yet calculated CVE-2021-43756
MISC
adsk — autodesk
 
A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution. 2022-06-16 not yet calculated CVE-2022-27532
MISC
adsk — autodesk
 
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. 2022-06-16 not yet calculated CVE-2022-27531
MISC
amazon — aws_apache_log4j
 
Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or CVE-2021-45046; it provides a temporary mitigation to CVE-2021-44228 by hotpatching the local Java virtual machines. To do so, it iterates through all running Java processes, performs several checks, and executes the Java virtual machine with the same permissions and capabilities as the running process to load the hotpatch. A local user could cause the hotpatch script to execute a binary with elevated privileges by running a custom java process that performs exec() of an SUID binary after the hotpatch has observed the process path and before it has observed its effective user ID. 2022-06-17 not yet calculated CVE-2022-33915
MISC
MISC
amd — processors
 
A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure. 2022-06-15 not yet calculated CVE-2022-23823
MISC
amodat — mobile_application_gateway attacker needs to craft a SQL payload. the vulnerable parameter is “agentid” must be authenticated to the admin panel. 2022-06-13 not yet calculated CVE-2022-23169
MISC
amodat — mobile_application_gateway The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin’– 2022-06-13 not yet calculated CVE-2022-23168
MISC
amodat — mobile_application_gateway Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED. 2022-06-13 not yet calculated CVE-2022-23167
MISC
amozing — ariang AriaNg v0.1.0~v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors’ access rights. 2022-06-15 not yet calculated CVE-2021-41418
MISC
android — windowmanager
 
In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-157929241 2022-06-15 not yet calculated CVE-2021-39691
MISC
android — closef
 
In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during startup of servicemanager, if an attacker can trigger an initialization failure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-215387420 2022-06-15 not yet calculated CVE-2021-39806
MISC
anker — eufy_homebase_2
 
A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to remote code execution. The device is exposed to attacks from the network. 2022-06-17 not yet calculated CVE-2022-21806
MISC
apache — hadoop
 
There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. 2022-06-13 not yet calculated CVE-2021-37404
CONFIRM
apache — hadoop
 
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. 2022-06-15 not yet calculated CVE-2021-33036
MISC
MLIST
apache– flume
 
Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol. 2022-06-14 not yet calculated CVE-2022-25167
CONFIRM
CONFIRM
MLIST
apache — nifi
 
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the default configuration. Command injection requires ShellUserGroupProvider to be one of the enabled User Group Providers in the Authorizers configuration. Command injection also requires an authenticated user with elevated privileges. Apache NiFi requires an authenticated user with authorization to modify access policies in order to execute the command. Apache NiFi Registry requires an authenticated user with authorization to read user groups in order to execute the command. The resolution removes command formatting based on user-provided arguments. 2022-06-15 not yet calculated CVE-2022-33140
MISC
MISC
apple — mobaku-auction&flea_market
 
‘Mobaoku-Auction&Flea Market’ App for iOS versions prior to 5.5.16 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack. 2022-06-14 not yet calculated CVE-2022-29482
MISC
apple — swift-corelibs-foundation
 
A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a deserialization mechanism offered by the Swift standard library, the Codable protocol; and the JSONDecoder class offered by swift-corelibs-foundation, which can deserialize types that adopt the Codable protocol based on the content of a provided JSON document. When a type that adopts Codable requests the initialization of a field with an integer value, the JSONDecoder class uses a type-erased container with different accessor methods to attempt and coerce a corresponding JSON value and produce an integer. In the case the JSON value was a numeric literal with a floating-point portion, JSONDecoder used different type-eraser methods during validation than it did during the final casting of the value. The checked casting produces a deterministic crash due to this mismatch. The JSONDecoder class is often wrapped by popular Swift-based web frameworks to parse the body of HTTP requests and perform basic type validation. This makes the attack low-effort: sending a specifically crafted JSON document during a request to these endpoints will cause them to crash. The attack does not have any confidentiality or integrity risks in and of itself; the crash is produced deterministically by an abort function that ensures that execution does not continue in the face of this violation of assumptions. However, unexpected crashes can lead to violations of invariants in services, so it’s possible that this attack can be used to trigger error conditions that escalate the risk. Producing a denial of service may also be the goal of an attacker in itself. This issue is solved in Swift 5.6.2 for Linux and Windows. This issue was solved by ensuring that the same methods are invoked both when validating and during casting, so that no type mismatch occurs. Swift for Linux and Windows versions are not ABI-interchangeable. To upgrade a service, its owner must update to this version of the Swift toolchain, then recompile and redeploy their software. The new version of Swift includes an updated swift-corelibs-foundation package. Versions of Swift running on Darwin-based operating systems are not affected. 2022-06-16 not yet calculated CVE-2022-1642
MISC
argo_project — argo
 
The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the (g *GitArtifactReader).Read() API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containing a symbolic link or an implicit directory name such as … 2022-06-17 not yet calculated CVE-2022-25856
CONFIRM
CONFIRM
CONFIRM
argopro — argo_events
 
Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated `ioutil.ReadAll()`. `ioutil.ReadAll()` reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server will be able to crash it and cause denial of service. A patch for this vulnerability has been released in Argo Events version 1.7.1. 2022-06-13 not yet calculated CVE-2022-31054
CONFIRM
MISC
MISC
MISC
asg_technologies — asg-zena_cross_platform_server_enterprise ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cleartext Storage of Sensitive Information in a Cookie. 2022-06-17 not yet calculated CVE-2021-45025
MISC
MISC
MISC
asg_technologies — asg-zena_cross_platform_server_enterprise ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS). 2022-06-17 not yet calculated CVE-2021-45026
MISC
MISC
MISC
asg_technologies — asg-zena_cross_platform_server_enterprise ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity (XXE). 2022-06-17 not yet calculated CVE-2021-45024
MISC
MISC
MISC
asus — rt-n53 ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface. 2022-06-17 not yet calculated CVE-2022-31874
MISC
av1 — video_extension AV1 Video Extension Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30167. 2022-06-15 not yet calculated CVE-2022-30193
MISC
axis_communications — multiple_products A vulnerability, which was classified as critical, was found in AXIS P1204, P3225, P3367, M3045, M3005 and M3007. This affects an unknown part of the component CGI Script. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component. 2022-06-15 not yet calculated CVE-2017-20049
N/A
N/A
axis_communications — multiple_products A vulnerability has been found in AXIS P1204, P3225, P3367, M3045, M3005 and M3007 and classified as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended to upgrade the affected component. 2022-06-15 not yet calculated CVE-2017-20050
N/A
N/A
axis_communications — multiple_products

 
A vulnerability, which was classified as critical, has been found in AXIS P1204, P3225, P3367, M3045, M3005 and M3007. Affected by this issue is some unknown functionality of the component Script Editor. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. 2022-06-15 not yet calculated CVE-2017-20048
N/A
N/A
N/A
axis_communications — multiple_products
 
A vulnerability classified as problematic has been found in AXIS P1204, P3225, P3367, M3045, M3005 and M3007. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. It is recommended to upgrade the affected component. 2022-06-15 not yet calculated CVE-2017-20046
N/A
N/A
axis_communications — multiple_products
 
A vulnerability classified as problematic was found in AXIS P1204, P3225, P3367, M3045, M3005 and M3007. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. 2022-06-15 not yet calculated CVE-2017-20047
N/A
N/A
N/A
bachmann_visutec — atvise
 
An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. 2022-06-17 not yet calculated CVE-2022-21184
MISC
bestwebsoft — contact_form_plugin
 
A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0.2 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-16 not yet calculated CVE-2017-20055
MISC
MISC
MISC
biscuit — biscuit
 
Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid ?-signatures. Such an attack would allow an attacker to create a token with any access level. The version 2 of the specification mandates a different algorithm than gamma signatures and as such is not affected by this vulnerability. The Biscuit implementations in Rust, Haskell, Go, Java and Javascript all have published versions following the v2 specification. There are no known workarounds for this issue. 2022-06-13 not yet calculated CVE-2022-31053
CONFIRM
MISC
bitmainer — antminer_monitor
 
A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static. 2022-06-17 not yet calculated CVE-2021-40903
MISC
MISC
MISC
blynk — blynk_library A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability. 2022-06-17 not yet calculated CVE-2022-29496
MISC
brackeen — brackeen
 
ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_convert_YCbCr_to_RGB. 2022-06-15 not yet calculated CVE-2021-41413
MISC
MISC
broadcom — ca_automic_automation CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code. 2022-06-16 not yet calculated CVE-2022-33752
MISC
broadcom — ca_automic_automation CA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the Automic agent that could allow a remote attacker to potentially access sensitive data. 2022-06-16 not yet calculated CVE-2022-33751
MISC
broadcom — ca_automic_automation CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands. 2022-06-16 not yet calculated CVE-2022-33750
MISC
broadcom — ca_automic_automation CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code. 2022-06-16 not yet calculated CVE-2022-33754
MISC
broadcom — ca_automic_automation CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially enumerate users. 2022-06-16 not yet calculated CVE-2022-33755
MISC
broadcom — ca_automic_automation CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to potentially elevate privileges. 2022-06-16 not yet calculated CVE-2022-33753
MISC
broadcom — ca_automic_automation
 
CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to potentially access sensitive data. 2022-06-16 not yet calculated CVE-2022-33756
MISC
broadcom — ca_clarity
 
CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system. 2022-06-16 not yet calculated CVE-2022-33739
MISC
checkmk — debian
 
A permission issue affects users that deployed the shipped version of the Checkmk Debian package. Packages created by the agent bakery (enterprise editions only) were not affected. Using the shipped version of the agents, the maintainer scripts located at /var/lib/dpkg/info/ will be owned by the user and the group with ID 1001. If such a user exists on the system, they can change the content of these files (which are then executed by root). This leads to a local privilege escalation on the monitored host. Version 1.6 through 1.6.9p29, version 2.0 through 2.0.0p26, version 2.1 through 2.1.0p3, and version 2.2.0i1 are affected. 2022-06-17 not yet calculated CVE-2022-33912
MISC
cisc0 — identity_services_engine
 
A vulnerability in the login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to log in without credentials and access all roles without any restrictions. This vulnerability is due to exposed sensitive Security Assertion Markup Language (SAML) metadata. An attacker could exploit this vulnerability by using the exposed SAML metadata to bypass authentication to the user portal. A successful exploit could allow the attacker to access all roles without any restrictions. 2022-06-15 not yet calculated CVE-2022-20733
CISCO
cisco — appdynamics_controller_software
 
A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that they would not normally have authorization to access. This vulnerability is due to improper authorization checking for HTTP requests that are submitted to the affected web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected instance of AppDynamics Controller. A successful exploit could allow the attacker to access the login page for an administrative console. AppDynamics has released software updates that address this vulnerability. 2022-06-15 not yet calculated CVE-2022-20736
CISCO
cisco — identity_servies_engine
 
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability exists because administrative privilege levels for sensitive data are not properly enforced. An attacker with read-only privileges for the web-based management interface on an affected device could exploit this vulnerability by browsing to a page that contains sensitive data. A successful exploit could allow the attacker to collect sensitive information about the system configuration. 2022-06-15 not yet calculated CVE-2022-20819
CISCO
cisco — small_business_routers
 
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient user input validation of incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device using root-level privileges. Cisco has not released software updates that address this vulnerability. 2022-06-15 not yet calculated CVE-2022-20825
CISCO
cisco — unified_ip_phones
 
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user’s phone if the Cisco Unified Communications Manager (CUCM) is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could result in duplicated manufactured keys installed on multiple devices. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on the secure communication between the phone and the CUCM. A successful exploit could allow the attacker to impersonate another user’s phone. This vulnerability cannot be addressed with software updates. There is a workaround that addresses this vulnerability. 2022-06-15 not yet calculated CVE-2022-20817
CISCO
cisco –secure_email_and_web_manager
 
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass authentication and log in to the web management interface of an affected device. This vulnerability is due to improper authentication checks when an affected device uses Lightweight Directory Access Protocol (LDAP) for external authentication. An attacker could exploit this vulnerability by entering a specific input on the login page of the affected device. A successful exploit could allow the attacker to gain unauthorized access to the web-based management interface of the affected device. 2022-06-15 not yet calculated CVE-2022-20798
CISCO
cisco –secure_email_and_web_manager
 
A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an authenticated, remote attacker to retrieve sensitive information from a Lightweight Directory Access Protocol (LDAP) external authentication server connected to an affected device. This vulnerability is due to a lack of proper input sanitization while querying the external authentication server. An attacker could exploit this vulnerability by sending a crafted query through an external authentication web page. A successful exploit could allow the attacker to gain access to sensitive information, including user credentials from the external authentication server. To exploit this vulnerability, an attacker would need valid operator-level (or higher) credentials. 2022-06-15 not yet calculated CVE-2022-20664
CISCO
connx — connx In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set. 2022-06-14 not yet calculated CVE-2021-40650
MISC
MISC
connx — connx
 
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set. 2022-06-14 not yet calculated CVE-2021-40649
MISC
MISC
couchbase — couchbase_server Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor. 2022-06-13 not yet calculated CVE-2022-32192
MISC
MISC
couchbase — couchbase_server Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor. 2022-06-13 not yet calculated CVE-2022-32193
MISC
MISC
couchbase — couchbase_server An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network. 2022-06-14 not yet calculated CVE-2022-32561
MISC
MISC
MISC
couchbase — couchbase_server An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure. 2022-06-13 not yet calculated CVE-2022-32558
MISC
MISC
MISC
couchbase — couchbase_server An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission. 2022-06-13 not yet calculated CVE-2022-32562
MISC
MISC
MISC
couchbase — couchbase_server An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings. 2022-06-13 not yet calculated CVE-2022-32560
MISC
MISC
MISC
couchbase — couchbase_server An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers. 2022-06-14 not yet calculated CVE-2022-32557
MISC
MISC
MISC
couchbase — couchbase_server An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics. 2022-06-14 not yet calculated CVE-2022-32559
MISC
MISC
MISC
couchbase — couchbase_server
 
An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document ids. 2022-06-13 not yet calculated CVE-2022-32565
MISC
MISC
MISC
couchbase — couchbase_server
 
An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie. 2022-06-13 not yet calculated CVE-2022-32564
MISC
MISC
MISC
covesa — covesa
 
An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets. 2022-06-16 not yet calculated CVE-2022-31291
MISC
d-link — dir-850l
 
An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption. 2022-06-16 not yet calculated CVE-2018-18907
MISC
MISC
deno — deno
 
Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory. 2022-06-12 not yet calculated CVE-2021-41641
MISC
MISC
devolutions — remote_desktop_manager
 
A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive information. This issue affects: Devolutions Remote Desktop Manager 2022.1.24 version and prior versions. 2022-06-15 not yet calculated CVE-2022-1342
MISC
discordjs — opus
 
All versions of package @discordjs/opus are vulnerable to Denial of Service (DoS) when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash. 2022-06-17 not yet calculated CVE-2022-25345
CONFIRM
CONFIRM
discourse — calendar
 
Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Prior to version 1.0.1, parsing and rendering of Event names can be susceptible to cross-site scripting (XSS) attacks. This vulnerability only affects sites which have modified or disabled Discourse’s default Content Security Policy. This issue is patched in version 1.0.1 of the Discourse Calendar plugin. As a workaround, ensure that the Content Security Policy is enabled, and has not been modified in a way which would make it more vulnerable to XSS attacks. 2022-06-14 not yet calculated CVE-2022-31059
CONFIRM
MISC
MISC
discourse — discourse
 
Discourse is an open-source discussion platform. Prior to version 2.8.4 in the `stable` branch and version `2.9.0.beta5` in the `beta` and `tests-passed` branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the `stable` branch and version `2.9.0.beta5` in the `beta` and `tests-passed` branches of Discourse. As a workaround, one may disable banners. 2022-06-14 not yet calculated CVE-2022-31060
MISC
CONFIRM
MISC
drive_composer — drive_composer

 
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a “repair” operation on the product. 2022-06-15 not yet calculated CVE-2022-31217
MISC
drive_composer — drive_composer
 
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a “repair” operation on the product. 2022-06-15 not yet calculated CVE-2022-31216
MISC
drive_composer — drive_composer
 
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a “repair” operation on the product. 2022-06-15 not yet calculated CVE-2022-31218
MISC
drive_composer — drive_composer
 
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a “repair” operation on the product. 2022-06-15 not yet calculated CVE-2022-31219
MISC
edgex_foundry — edgex_foundry
 
EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to be kept in the EdgeX secret store and require authentication to access. This vulnerability bypasses the access controls on message bus credentials when running in security-enabled mode. (No credentials are required when running in security-disabled mode.) As a result, attackers could intercept data or inject fake data into the EdgeX message bus. Users should upgrade to EdgeXFoundry Kamakura release (2.2.0) or to the June 2022 EdgeXFoundry LTS Jakarta release (2.1.1) to receive a patch. More information about which go modules, docker containers, and snaps contain patches is available in the GitHub Security Advisory. There are currently no known workarounds for this issue. 2022-06-14 not yet calculated CVE-2022-31066
MISC
CONFIRM
MISC
electron — electron
 
Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerability in versions prior to 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 allows attackers who have control over a given apps update server / update storage to serve maliciously crafted update packages that pass the code signing validation check but contain malicious code in some components. This kind of attack would require significant privileges in a potential victim’s own auto updating infrastructure and the ease of that attack entirely depends on the potential victim’s infrastructure security. Electron versions 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 contain a fix for this issue. There are no known workarounds. 2022-06-13 not yet calculated CVE-2022-29257
CONFIRM
electron — electron
 
Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerability in versions prior to 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 allows a renderer with JS execution to obtain access to a new renderer process with `nodeIntegrationInSubFrames` enabled which in turn allows effective access to `ipcRenderer`. The `nodeIntegrationInSubFrames` option does not implicitly grant Node.js access. Rather, it depends on the existing sandbox setting. If an application is sandboxed, then `nodeIntegrationInSubFrames` just gives access to the sandboxed renderer APIs, which include `ipcRenderer`. If the application then additionally exposes IPC messages without IPC `senderFrame` validation that perform privileged actions or return confidential data this access to `ipcRenderer` can in turn compromise your application / user even with the sandbox enabled. Electron versions 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 contain a fix for this issue. As a workaround, ensure that all IPC message handlers appropriately validate `senderFrame`. 2022-06-13 not yet calculated CVE-2022-29247
CONFIRM
electrum — electrum
 
paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data). On Windows, this can lead to capture of credentials over SMB. On Linux and UNIX, it can lead to a denial of service by specifying the /dev/zero filename. 2022-06-17 not yet calculated CVE-2022-31246
MISC
MISC
elementor — website_builder
 
DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor’s Elementor Website Builder plugin <= 3.5.5 versions. 2022-06-13 not yet calculated CVE-2022-29455
CONFIRM
CONFIRM
CONFIRM
employee_leaves_management_system — employee_leaves_management_system Employee Leaves Management System (ELMS) V 2.1 is vulnerable to Cross Site Request Forgery (CSRF) via /myprofile.php. 2022-06-14 not yet calculated CVE-2022-30931
MISC
MISC
en100 — ethernet_module
 
A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). Affected applications contains a memory corruption vulnerability while parsing specially crafted HTTP packets to /txtrace endpoint. This could allow an attacker to crash the affected application leading to a denial of service condition. 2022-06-14 not yet calculated CVE-2022-30937
MISC
fast-string-search — fast-string-search
 
All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory. 2022-06-17 not yet calculated CVE-2022-25872
CONFIRM
CONFIRM
fast-string-search — fast-string-search
 
All versions of package fast-string-search are vulnerable to Denial of Service (DoS) when computations are incorrect for non-string inputs. One can cause the V8 to attempt reading from non-permitted locations and cause a segmentation fault due to the violation. 2022-06-17 not yet calculated CVE-2022-22138
CONFIRM
fedai — fate
 
An issue was discovered in function sync_tree in hetero_decision_tree_guest.py in WeBank FATE (Federated AI Technology Enabler) 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling. 2022-06-16 not yet calculated CVE-2020-25459
MISC
festo — controller
 
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint “cecc-x-refresh-request” POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. 2022-06-13 not yet calculated CVE-2022-30311
CONFIRM
festo — controller
 
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint “cecc-x-acknerr-request” POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. 2022-06-13 not yet calculated CVE-2022-30310
CONFIRM
festo — controller
 
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint “cecc-x-web-viewer-request-on” POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. 2022-06-13 not yet calculated CVE-2022-30308
CONFIRM
festo — controller
 
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint “cecc-x-web-viewer-request-off” POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. 2022-06-13 not yet calculated CVE-2022-30309
CONFIRM
filecloud — filecloud A vulnerability classified as critical has been found in FileCloud. Affected is the NTFS handler which leads to improper access controls. It is possible to launch the attack remotely but it demands some form of authentication. Upgrading to version 21.3.5.18513 is able to address this issue. It is recommended to upgrade the affected component. 2022-06-15 not yet calculated CVE-2022-1958
MISC
MISC
MISC
finastra — nestjs_proxy
 
NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to block sensitive cookies (e.g. session cookies) from being forwarded to backend services configured by the application developer. This could have led to sensitive cookies being inadvertently exposed to such services that should not see them. The patched version now blocks cookies from being forwarded by default. However developers can configure an allow-list of cookie names by using the `allowedCookies` config setting. This issue has been fixed in version 0.7.0 of `@finastra/nestjs-proxy`. Users of `@ffdc/nestjs-proxy` are advised that this package has been deprecated and is no longer being maintained or receiving updates. Such users should update their package.json file to use `@finastra/nestjs-proxy` instead. 2022-06-15 not yet calculated CVE-2022-31070
MISC
CONFIRM
finastra — nestjs_proxy
 
NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application developer. This could have resulted in sensitive information such as OAuth bearer access tokens being inadvertently exposed to such services that should not see them. A new feature has been introduced in the patched version of nestjs-proxy that allows application developers to opt out of forwarding the Authorization headers on a per service basis using the `forwardToken` config setting. Developers are advised to review the README for this library on Github or NPM for further details on how this configuration can be applied. This issue has been fixed in version 0.7.0 of `@finastra/nestjs-proxy`. Users of `@ffdc/nestjs-proxy` are advised that this package has been deprecated and is no longer being maintained or receiving updates. Such users should update their package.json file to use `@finastra/nestjs-proxy` instead. 2022-06-15 not yet calculated CVE-2022-31069
CONFIRM
MISC
flatcore — flatcore_cms flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user execute arbitrary PHP code. 2022-06-16 not yet calculated CVE-2021-41402
MISC
flatcore — flatcore_cms flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities. 2022-06-15 not yet calculated CVE-2021-41403
MISC
francoisjacquet — rosariosis
 
SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0. 2022-06-13 not yet calculated CVE-2022-2067
MISC
CONFIRM
fuji_electric — v-server
 
Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. 2022-06-14 not yet calculated CVE-2022-29524
MISC
MISC
MISC
fuji_electric — v-sft Use after free vulnerability exists in the simulator module contained in the graphic editor ‘V-SFT’ versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. 2022-06-14 not yet calculated CVE-2022-29522
MISC
MISC
fuji_electric — v-sft Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor ‘V-SFT’ v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. 2022-06-14 not yet calculated CVE-2022-29506
MISC
MISC
MISC
fuji_electric — v-sft Heap-based buffer overflow exists in the simulator module contained in the graphic editor ‘V-SFT’ versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. 2022-06-14 not yet calculated CVE-2022-26302
MISC
MISC
fuji_electric — v-sft
 
Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor ‘V-SFT’ versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. 2022-06-14 not yet calculated CVE-2022-29925
MISC
MISC
fujielectric — v-server Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. 2022-06-16 not yet calculated CVE-2022-30549
MISC
MISC
MISC
fujielectric — v-sft
 
Out-of-bounds write vulnerability exists in the simulator module contained in the graphic editor ‘V-SFT’ versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. 2022-06-16 not yet calculated CVE-2022-30538
MISC
MISC
fujielectric — v-sft
 
Out-of-bounds read vulnerability exists in the simulator module contained in the graphic editor ‘V-SFT’ versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file. 2022-06-16 not yet calculated CVE-2022-30546
MISC
MISC
ge — voluson_s8
 
A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the local network is required for this attack to succeed. 2022-06-17 not yet calculated CVE-2020-36549
N/A
N/A
ge — voluson_s8
 
A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host. 2022-06-17 not yet calculated CVE-2020-36548
N/A
N/A
ge — voluson_s8
 
A vulnerability was found in GE Voluson S8. It has been rated as critical. This issue affects the Service Browser which itroduces hard-coded credentials. Attacking locally is a requirement. It is recommended to change the configuration settings. 2022-06-17 not yet calculated CVE-2020-36547
N/A
N/A
ghostscript — ghostscript
 
A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an init_device_procs defined for the device that uses it as a prototype that depends upon the number of bits per pixel. For bpp > 64, mem_x_device is used and does not have an init_device_procs defined. This flaw allows an attacker to parse a large number of bits (more than 64 bits per pixel), which triggers a NULL pointer dereference flaw, causing an application to crash. 2022-06-16 not yet calculated CVE-2022-2085
MISC
MISC
MISC
giflib — gif2rgb
 
A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file. 2022-06-14 not yet calculated CVE-2021-40633
MISC
git.videolan — ffmpeg A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125011
MISC
MISC
git.videolan — ffmpeg A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intra_pred of the file libavcodec/hevcpred_template.c. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125007
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function add_yblock of the file libavcodec/snow.h. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125009
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125015
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125014
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrle_decode_frame of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125013
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125012
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125017
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decode_slice_header of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125010
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function get_siz of the file libavcodec/jpeg2000dec.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125003
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125008
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function output_frame of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125006
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2022-06-13 not yet calculated CVE-2017-20041
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_vol_header of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125005
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decode_hextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125004
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability was found in FFmpeg 2.0. It has been rated as problematic. This issue affects the function ff_init_buffer_info of the file utils.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125016
MISC
MISC
git.videolan — ffmpeg
 
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function dnxhd_init_rc of the file libavcodec/dnxhdenc.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. 2022-06-18 not yet calculated CVE-2014-125002
MISC
MISC
google — android
 
The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS or RCE.Product: AndroidVersions: Android SoCAndroid ID: A-228868888 2022-06-15 not yet calculated CVE-2022-20210
MISC
google — android
 
In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-207502397 2022-06-15 not yet calculated CVE-2022-20209
MISC
google — android
 
In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-192743373 2022-06-15 not yet calculated CVE-2022-20208
MISC
google — android
 
In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-185513714 2022-06-15 not yet calculated CVE-2022-20207
MISC
google — android
 
In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead to local information disclosure about enabled notification listeners with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-220737634 2022-06-15 not yet calculated CVE-2022-20206
MISC
google — android
 
In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-215212561 2022-06-15 not yet calculated CVE-2022-20205
MISC
google — android
 
In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could lead to local escalation of privilege by conflating apps with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-212434116 2022-06-15 not yet calculated CVE-2022-20193
MISC
google — android
 
In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-220733817 2022-06-15 not yet calculated CVE-2022-20201
MISC
google — android
 
In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-171495100 2022-06-15 not yet calculated CVE-2022-20204
MISC
google — android
 
In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-204704614 2022-06-15 not yet calculated CVE-2022-20202
MISC
google — android
 
In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-222684510 2022-06-15 not yet calculated CVE-2022-20194
MISC
google — android
 
In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-212695058 2022-06-15 not yet calculated CVE-2022-20200
MISC
google — android
 
In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-221851879 2022-06-15 not yet calculated CVE-2022-20198
MISC
google — android
 
In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-208279300 2022-06-15 not yet calculated CVE-2022-20197
MISC
google — android
 
In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-201535148 2022-06-15 not yet calculated CVE-2022-20196
MISC
google — android
 
In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-213172664 2022-06-15 not yet calculated CVE-2022-20195
MISC
google — android
 
In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222472803References: N/A 2022-06-15 not yet calculated CVE-2022-20233
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A 2022-06-15 not yet calculated CVE-2022-20173
MISC
google — android
 
In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-215912712 2022-06-15 not yet calculated CVE-2022-20192
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A 2022-06-15 not yet calculated CVE-2022-20191
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A 2022-06-15 not yet calculated CVE-2022-20168
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A 2022-06-15 not yet calculated CVE-2022-20190
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A 2022-06-15 not yet calculated CVE-2022-20188
MISC
google — android
 
In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-215001024References: N/A 2022-06-15 not yet calculated CVE-2022-20186
MISC
google — android
 
In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208842348References: N/A 2022-06-15 not yet calculated CVE-2022-20185
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A 2022-06-15 not yet calculated CVE-2022-20184
MISC
google — android
 
In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188911154References: N/A 2022-06-15 not yet calculated CVE-2022-20183
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A 2022-06-15 not yet calculated CVE-2022-20181
MISC
google — android
 
In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-206987222References: N/A 2022-06-15 not yet calculated CVE-2022-20172
MISC
google — android
 
In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-224932775References: N/A 2022-06-15 not yet calculated CVE-2022-20178
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A 2022-06-15 not yet calculated CVE-2022-20169
MISC
google — android
 
In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-197787879References: N/A 2022-06-15 not yet calculated CVE-2022-20176
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A 2022-06-15 not yet calculated CVE-2022-20175
MISC
google — android
 
In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210847407References: N/A 2022-06-15 not yet calculated CVE-2022-20174
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A 2022-06-15 not yet calculated CVE-2022-20171
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A 2022-06-15 not yet calculated CVE-2022-20179
MISC
google — android
 
In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalation of privilege,with no additional execution privileges needed. User interaction is not needed for exploitation. 2022-06-15 not yet calculated CVE-2022-20203
MISC
google — android
 
In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222348453References: N/A 2022-06-15 not yet calculated CVE-2022-20182
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A 2022-06-15 not yet calculated CVE-2022-20177
MISC
google — android
 
In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-217934478 2022-06-15 not yet calculated CVE-2022-20129
MISC
google — android
 
In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-203431023 2022-06-15 not yet calculated CVE-2022-20126
MISC
google — android
 
In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221862119 2022-06-15 not yet calculated CVE-2022-20127
MISC
google — android
 
In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-187702830 2022-06-15 not yet calculated CVE-2022-20144
MISC
google — android
 
In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-170646036 2022-06-15 not yet calculated CVE-2022-20124
MISC
google — android
 
In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221856662 2022-06-15 not yet calculated CVE-2022-20131
MISC
google — android
 
In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel 2022-06-15 not yet calculated CVE-2022-20132
MISC
google — android
 
In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-206807679 2022-06-15 not yet calculated CVE-2022-20133
MISC
google — android
 
In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-220303465 2022-06-15 not yet calculated CVE-2022-20135
MISC
google — android
 
In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-220735360 2022-06-15 not yet calculated CVE-2022-20143
MISC
google — android
 
In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-216631962 2022-06-15 not yet calculated CVE-2022-20142
MISC
google — android
 
In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112551163References: Upstream kernel 2022-06-15 not yet calculated CVE-2022-20141
MISC
google — android
 
In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-218341397 2022-06-15 not yet calculated CVE-2022-20134
MISC
google — android
 
In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFILE_PROVISIONED intent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-210469972 2022-06-15 not yet calculated CVE-2022-20138
MISC
google — android
 
In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-227618988 2022-06-15 not yet calculated CVE-2022-20140
MISC
google — android
 
In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-206986392 2022-06-15 not yet calculated CVE-2022-20137
MISC
google — android
 
In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-219513976References: Upstream kernel 2022-06-15 not yet calculated CVE-2022-20148
MISC
google — android
 
In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-194402515 2022-06-15 not yet calculated CVE-2022-20125
MISC
google — android
 
In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224314979 2022-06-15 not yet calculated CVE-2022-20130
MISC
google — android
 
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel 2022-06-15 not yet calculated CVE-2022-20153
MISC
google — android
 
In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information disclosure of private files with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-211757677References: N/A 2022-06-15 not yet calculated CVE-2022-20146
MISC
google — android
 
In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221216105 2022-06-15 not yet calculated CVE-2022-20147
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A 2022-06-15 not yet calculated CVE-2022-20170
MISC
google — android
 
In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-201660636 2022-06-15 not yet calculated CVE-2022-20145
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A 2022-06-15 not yet calculated CVE-2022-20151
MISC
google — android
 
In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-202006198References: N/A 2022-06-15 not yet calculated CVE-2022-20152
MISC
google — android
 
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221852424 2022-06-15 not yet calculated CVE-2022-20123
MISC
google — android
 
In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174846563References: Upstream kernel 2022-06-15 not yet calculated CVE-2022-20154
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A 2022-06-15 not yet calculated CVE-2022-20149
MISC
google — android
 
In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-176754369References: N/A 2022-06-15 not yet calculated CVE-2022-20155
MISC
google — android
 
In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210971465References: N/A 2022-06-15 not yet calculated CVE-2022-20159
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A 2022-06-15 not yet calculated CVE-2022-20160
MISC
google — android
 
In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223492713References: N/A 2022-06-15 not yet calculated CVE-2022-20162
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A 2022-06-15 not yet calculated CVE-2022-20164
MISC
google — android
 
In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-220868345References: N/A 2022-06-15 not yet calculated CVE-2022-20165
MISC
google — android
 
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel 2022-06-15 not yet calculated CVE-2022-20166
MISC
google — android
 
Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A 2022-06-15 not yet calculated CVE-2022-20167
MISC
google — android
 
In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-212803946References: N/A 2022-06-15 not yet calculated CVE-2022-20156
MISC
google — kctf
 
kCTF is a Kubernetes-based infrastructure for capture the flag (CTF) competitions. Prior to version 1.6.0, the kctf cluster set-src-ip-ranges was broken and allowed traffic from any IP. The problem has been patched in v1.6.0. As a workaround, those who want to test challenges privately can mark them as `public: false` and use `kctf chal debug port-forward` to connect. 2022-06-13 not yet calculated CVE-2022-31055
MISC
CONFIRM
MISC
got — got
 
The got package before 12.1.0 for Node.js allows a redirect to a UNIX socket. 2022-06-18 not yet calculated CVE-2022-33987
MISC
MISC
gpac — mp4box
 
In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability. 2022-06-16 not yet calculated CVE-2021-41458
MISC
grafana — grafana ** DISPUTED ** Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability. 2022-06-17 not yet calculated CVE-2022-32276
MISC
MISC
haraj — haraj A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. 2022-06-16 not yet calculated CVE-2022-31298
MISC
MISC
MISC
haraj — haraj A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. 2022-06-16 not yet calculated CVE-2022-31300
MISC
MISC
MISC
haraj — haraj Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component. 2022-06-16 not yet calculated CVE-2022-31301
MISC
MISC
MISC
haraj — haraj
 
Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form. 2022-06-16 not yet calculated CVE-2022-31299
MISC
MISC
MISC
harmonyos — bone_voice_id_ta
 
The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution. 2022-06-13 not yet calculated CVE-2021-40036
MISC
harmonyos — huawei The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality. 2022-06-13 not yet calculated CVE-2022-31757
MISC
MISC
harmonyos — huawei The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. 2022-06-13 not yet calculated CVE-2022-31758
MISC
MISC
harmonyos — huawei
 
The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability. 2022-06-13 not yet calculated CVE-2022-31753
MISC
MISC
harmonyos — huawei
 
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality. 2022-06-13 not yet calculated CVE-2022-31760
MISC
MISC
harmonyos — permission_management
 
HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information. 2022-06-13 not yet calculated CVE-2021-46811
MISC
MISC
hevc — video_extensions
 
HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22018, CVE-2022-29111, CVE-2022-29119. 2022-06-15 not yet calculated CVE-2022-30188
MISC
hpjansson — chafa
 
Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0. 2022-06-13 not yet calculated CVE-2022-2061
MISC
CONFIRM
huawei — emui
 
Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability. 2022-06-13 not yet calculated CVE-2021-46813
MISC
ibm — financial_transaction_manager_for_digital_payments_for_multi-platform
 
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 166801. 2022-06-15 not yet calculated CVE-2019-4575
XF
CONFIRM
ibm — iax
 
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 224444. 2022-06-15 not yet calculated CVE-2022-22444
CONFIRM
XF
ibm — spectrum_project_operations_center In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator’s invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325. 2022-06-17 not yet calculated CVE-2022-22485
XF
CONFIRM
ibm — x-force_exchange
 
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c. 2022-06-18 not yet calculated CVE-2021-46822
MISC
MISC
ibm — robotic_process_automation IBM Robotic Process Automation 20.10.0, 20.12.5, 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow a user to obtain sensitive information due to information properly masked in the control center UI. IBM X-Force ID: 227294. 2022-06-17 not yet calculated CVE-2022-30607
CONFIRM
XF
imagemagick — imagemagick A vulnerability was found in ImageMagick, causing an outside the range of representable values of type ‘unsigned char’ at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior. 2022-06-16 not yet calculated CVE-2022-32545
MISC
MISC
MISC
imagemagick — imagemagick A vulnerability was found in ImageMagick, causing an outside the range of representable values of type ‘unsigned long’ at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior. 2022-06-16 not yet calculated CVE-2022-32546
MISC
MISC
MISC
imagemagick — imagemagick
 
In ImageMagick, there is load of misaligned address for type ‘double’, which requires 8 byte alignment and for type ‘float’, which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior. 2022-06-16 not yet calculated CVE-2022-32547
MISC
MISC
MISC
innosetup — installer
 
A vulnerability was found in InnoSetup Installer. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to uncontrolled search path. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2022-06-16 not yet calculated CVE-2017-20051
MISC
MISC
intel — processors
 
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. 2022-06-15 not yet calculated CVE-2022-21125
MISC
MLIST
CONFIRM
FEDORA
FEDORA
intel — processors
 
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. 2022-06-15 not yet calculated CVE-2022-21123
MISC
MLIST
FEDORA
FEDORA
intel — processors
 
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. 2022-06-15 not yet calculated CVE-2022-21166
MISC
MLIST
FEDORA
FEDORA
intel — processors
 
Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access. 2022-06-15 not yet calculated CVE-2022-21180
MISC
MLIST
intel — processors
 
Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via network access. 2022-06-15 not yet calculated CVE-2022-24436
MISC
intel — processors
 
Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. 2022-06-15 not yet calculated CVE-2022-21127
MISC
MLIST
inventree — inventree
 
Cross-site Scripting (XSS) – Stored in GitHub repository inventree/inventree prior to 0.7.2. 2022-06-17 not yet calculated CVE-2022-2113
MISC
CONFIRM
inventree — inventree
 
Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2. 2022-06-17 not yet calculated CVE-2022-2111
MISC
CONFIRM
inventree — inventree
 
Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2. 2022-06-17 not yet calculated CVE-2022-2112
MISC
CONFIRM
invision_community — ips_community_suite
 
A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated user. 2022-06-13 not yet calculated CVE-2021-40604
MISC
iobit — iotransfer In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim’s endpoint, which can result in data theft and remote code execution. 2022-06-16 not yet calculated CVE-2022-24562
MISC
MISC
MISC
itop — itops
 
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php. 2022-06-14 not yet calculated CVE-2022-31403
MISC
MISC
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/all_teacher.php. 2022-06-15 not yet calculated CVE-2022-32433
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_events.php?event_id=. 2022-06-15 not yet calculated CVE-2022-32376
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_student_subject.php?index=. 2022-06-15 not yet calculated CVE-2022-32380
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_parents_profile.php?my_index=. 2022-06-15 not yet calculated CVE-2022-32379
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher_profile.php?my_index=. 2022-06-15 not yet calculated CVE-2022-32378
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_exam_timetable.php?id=. 2022-06-15 not yet calculated CVE-2022-32377
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject.php?id=. 2022-06-15 not yet calculated CVE-2022-32372
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_admin_profile.php?my_index=. 2022-06-15 not yet calculated CVE-2022-32381
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_timetable.php?id=. 2022-06-15 not yet calculated CVE-2022-32375
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject_routing.php?id=. 2022-06-15 not yet calculated CVE-2022-32374
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_exam.php?id=. 2022-06-15 not yet calculated CVE-2022-32373
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher.php?id=. 2022-06-15 not yet calculated CVE-2022-32371
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_classroom.php?id=. 2022-06-15 not yet calculated CVE-2022-32370
MISC
itsourcecode — advanced_school_management_system itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_grade.php?id=. 2022-06-15 not yet calculated CVE-2022-32368
MISC
javadelight — delight_nashorn_sandox
 
An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service (DoS) attack. 2022-06-14 not yet calculated CVE-2021-40660
MISC
jforum — jforum
 
JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http://target_host:port/jforum-2.8.0/jforum.page, which allows attackers to arbitrarily add admin accounts. 2022-06-16 not yet calculated CVE-2022-26173
MISC
MISC
MISC
MISC
MISC
joplin — desktop_app Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code due to improper sanitizing of html. 2022-06-16 not yet calculated CVE-2021-33295
MISC
MISC
MISC
jupyter — notebook
 
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only prevented listing the contents of hidden directories, not accessing individual hidden files or files in hidden directories (i.e. hidden files were ‘hidden’ but not ‘inaccessible’). This could lead to notebook configurations allowing authenticated access to files that may reasonably be expected to be disallowed. Because fully authenticated requests are required, this is of relatively low impact. But if a server’s root directory contains sensitive files whose only protection from the server is being hidden (e.g. `~/.ssh` while serving $HOME), then any authenticated requests could access files if their names are guessable. Such contexts also necessarily have full access to the server and therefore execution permissions, which also generally grants access to all the same files. So this does not generally result in any privilege escalation or increase in information access, only an additional, unintended means by which the files could be accessed. Version 6.4.12 contains a patch for this issue. There are currently no known workarounds. 2022-06-14 not yet calculated CVE-2022-29238
CONFIRM
jupyter — server
 
Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of `root_dir` that contains the starting user’s home directory, then the underlying REST API can be used to leak the access token assigned at start time by guessing/brute forcing the PID of the jupyter server. While this requires an authenticated user session, this URL can be used from a cross-site scripting payload or from a hooked or otherwise compromised browser to leak this access token to a malicious third party. This token can be used along with the REST API to interact with Jupyter services/notebooks such as modifying or overwriting critical files, such as .bashrc or .ssh/authorized_keys, allowing a malicious user to read potentially sensitive data and possibly gain control of the impacted system. This issue is patched in version 1.17.1. 2022-06-14 not yet calculated CVE-2022-29241
CONFIRM
jvn — ec-cube4
 
Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page. 2022-06-13 not yet calculated CVE-2022-27174
MISC
MISC
jvn — revoworks
 
Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using ‘File Sanitization Library’ 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using ‘File Sanitization Option’), and RevoWorks Desktop 2.1.84 and prior versions (when using ‘File Sanitization Option’), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment. 2022-06-14 not yet calculated CVE-2022-27176
MISC
MISC
jvn — t&d_data_server
 
Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English Edition) Ver.2.30 and earlier, THERMO RECORDER DATA SERVER (Japanese Edition) Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER (English Edition) Ver.2.13 and earlier allows a remote attacker to view an arbitrary file on the server via unspecified vectors. 2022-06-14 not yet calculated CVE-2022-29509
MISC
MISC
MISC
kiegroup — drools
 
drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability. 2022-06-16 not yet calculated CVE-2021-41411
MISC
kreado — kreasfero
 
Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution. 2022-06-14 not yet calculated CVE-2021-42675
MISC
MISC
MISC
kromitgmbh — titra
 
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1. 2022-06-16 not yet calculated CVE-2022-2098
MISC
CONFIRM
linux — linux_kernel
 
drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function. 2022-06-18 not yet calculated CVE-2022-33981
MISC
MISC
MISC
MISC
linux — linux_kernel
 
An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER (aka PEEKUSR and POKEUSR) when accessing floating point registers. 2022-06-10 not yet calculated CVE-2022-32981
MISC
MLIST
magicpin — magicpin An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file. 2022-06-14 not yet calculated CVE-2022-31447
MISC
MISC
maianaffiliate — maianaffiliate A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel. 2022-06-16 not yet calculated CVE-2021-41421
MISC
MISC
maianaffiliate — maianaffiliate
 
A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel. 2022-06-16 not yet calculated CVE-2021-41420
MISC
MISC
mendix — saml_module A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All versions < V3.2.3). In certain configurations SAML module is vulnerable to Cross Site Scripting (XSS) attacks due to insufficient error message sanitation. This could allow an attacker to execute malicious code by tricking users into accessing a malicious link. 2022-06-14 not yet calculated CVE-2022-32286
MISC
mendix — saml_module
 
A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All versions < V3.2.3). The affected module is vulnerable to XML External Entity (XXE) attacks due to insufficient input sanitation. This may allow an attacker to disclose confidential data under certain circumstances. 2022-06-14 not yet calculated CVE-2022-32285
MISC
mercury — mipc451-4
 
MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable via a crafted POST request. 2022-06-16 not yet calculated CVE-2022-31849
MISC
metasys — ads_adx_oas
 
Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the MUI Graphics web interface. 2022-06-15 not yet calculated CVE-2022-21938
CONFIRM
CERT
metasys — ads_adx_oas
 
A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change. 2022-06-15 not yet calculated CVE-2022-21935
CONFIRM
CERT
metasys — ads_adx_oas
 
Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the web interface. 2022-06-15 not yet calculated CVE-2022-21937
CONFIRM
CERT
microsoft — av1_vide_extension AV1 Video Extension Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30193. 2022-06-15 not yet calculated CVE-2022-30167
MISC
microsoft — azure Azure Service Fabric Container Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30137
MISC
microsoft — azure Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30177, CVE-2022-30179. 2022-06-15 not yet calculated CVE-2022-30178
MISC
microsoft — azure Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30177, CVE-2022-30178. 2022-06-15 not yet calculated CVE-2022-30179
MISC
microsoft — azure Azure RTOS GUIX Studio Information Disclosure Vulnerability. 2022-06-15 not yet calculated CVE-2022-30180
MISC
microsoft — azure
 
Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30178, CVE-2022-30179. 2022-06-15 not yet calculated CVE-2022-30177
MISC
microsoft — azure
 
Azure Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-29149
MISC
microsoft — excel
 
Microsoft Excel Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-30173
MISC
microsoft — hevc_video_extensions
 
HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22018, CVE-2022-29111, CVE-2022-30188. 2022-06-15 not yet calculated CVE-2022-29119
MISC
microsoft — hevc_video_extensions
 
HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-29111, CVE-2022-29119, CVE-2022-30188. 2022-06-15 not yet calculated CVE-2022-22018
MISC
microsoft — hevc_video_extensions
 
HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22018, CVE-2022-29119, CVE-2022-30188. 2022-06-15 not yet calculated CVE-2022-29111
MISC
microsoft — kerberos
 
Kerberos AppContainer Security Feature Bypass Vulnerability. 2022-06-15 not yet calculated CVE-2022-30164
MISC
microsoft — office Microsoft Office Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30159, CVE-2022-30171. 2022-06-15 not yet calculated CVE-2022-30172
MISC
microsoft — office
 
Microsoft Office Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-30174
MISC
microsoft — office
 
Microsoft Office Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30159, CVE-2022-30172. 2022-06-15 not yet calculated CVE-2022-30171
MISC
microsoft — photos
 
Microsoft Photos App Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-30168
MISC
microsoft — sql_server
 
Microsoft SQL Server Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-29143
MISC
microsoft — windows Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30131
MISC
microsoft — windows Windows Media Center Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30135
MISC
microsoft — windows Windows Container Manager Service Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30132
MISC
microsoft — windows
 
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30166
MISC
microsoft– edge
 
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-22021
MISC
microsoft — file_server Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30154
MISC
microsoft — office
 
Microsoft Office Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30171, CVE-2022-30172. 2022-06-15 not yet calculated CVE-2022-30159
MISC
microsoft — office365
 
A vulnerability was found in Microsoft O365 and classified as critical. This issue affects the Conditional Access Policy which leads to improper access controls. By default the policy is not verified for every request. The attack may be initiated remotely. Exploit details have been disclosed to the public. It is recommended to change the configuration settings. NOTE: Vendor claims that pre-requisites are very high, the feature works as intended, and that configuration settings might mitigate the issue. 2022-06-14 not yet calculated CVE-2022-2077
N/A
N/A
N/A
N/A
microsoft — office365
 
** DISPUTED ** A vulnerability has been found in Microsoft O365 and classified as critical. The session cookies introduce a session expiration issue as they might be used by two clients at the same time. The attack can be initiated remotely. Exploit details have been disclosed to the public. The real-world consequences of this vulnerability are still doubted at the moment. It is recommended to change the configuration settings. NOTE: Vendor claims that pre-requisites are very high, the feature works as intended, and that configuration settings might mitigate the issue. 2022-06-14 not yet calculated CVE-2022-2076
N/A
N/A
N/A
N/A
microsoft — sharepoint
 
Microsoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30157. 2022-06-15 not yet calculated CVE-2022-30158
MISC
microsoft — sharepoint
 
Microsoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30158. 2022-06-15 not yet calculated CVE-2022-30157
MISC
microsoft — windows Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30139, CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30161. 2022-06-15 not yet calculated CVE-2022-30153
MISC
microsoft — windows Windows Kernel Denial of Service Vulnerability. 2022-06-15 not yet calculated CVE-2022-30155
MISC
microsoft — windows Windows Advanced Local Procedure Call Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30160
MISC
microsoft — windows
 
Windows File History Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-30142
MISC
microsoft — windows
 
Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30150
MISC
microsoft — windows
 
Windows Desired State Configuration (DSC) Information Disclosure Vulnerability. 2022-06-15 not yet calculated CVE-2022-30148
MISC
microsoft — windows
 
Windows Installer Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30147
MISC
microsoft — windows
 
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30139, CVE-2022-30141, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161. 2022-06-15 not yet calculated CVE-2022-30143
MISC
microsoft — windows
 
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30139, CVE-2022-30141, CVE-2022-30143, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161. 2022-06-15 not yet calculated CVE-2022-30146
MISC
microsoft — windows
 
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-30145
MISC
microsoft — windows
 
Windows Network Address Translation (NAT) Denial of Service Vulnerability. 2022-06-15 not yet calculated CVE-2022-30152
MISC
microsoft — windows
 
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30139, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161. 2022-06-15 not yet calculated CVE-2022-30141
MISC
microsoft — windows
 
Windows Hyper-V Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-30163
MISC
microsoft — windows
 
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30151
MISC
microsoft — windows
 
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161. 2022-06-15 not yet calculated CVE-2022-30139
MISC
microsoft — windows
 
Windows Kerberos Elevation of Privilege Vulnerability. 2022-06-15 not yet calculated CVE-2022-30165
MISC
microsoft — windows
 
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30139, CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30153, CVE-2022-30161. 2022-06-15 not yet calculated CVE-2022-30149
MISC
microsoft — windows
 
Windows Kernel Information Disclosure Vulnerability. 2022-06-15 not yet calculated CVE-2022-30162
MISC
microsoft — windows
 
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30139, CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153. 2022-06-15 not yet calculated CVE-2022-30161
MISC
microsoft — windows
 
Windows iSCSI Discovery Service Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-30140
MISC
microsoft — windows
 
Windows Network File System Remote Code Execution Vulnerability. 2022-06-15 not yet calculated CVE-2022-30136
MISC
microsoft — windows_smbv3
 
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot. 2022-06-14 not yet calculated CVE-2022-32230
CONFIRM
MISC
MISC
MISC
mini_cms — mini_cns
 
A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page. 2022-06-13 not yet calculated CVE-2021-41663
MISC
MISC
MISC
mint — workbench
 
Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Mint WorkBench installer file allows a low-privileged user to run a “repair” operation on the product 2022-06-15 not yet calculated CVE-2022-26057
MISC
mitel — mivoice_business
 
A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker (that has network access to the management interface) to conduct a buffer overflow attack due to insufficient validation of URL parameters. A successful exploit could allow arbitrary code execution. 2022-06-17 not yet calculated CVE-2022-31784
MISC
MISC
mitsubishi_electric — melsec-Q
 
Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC-Q Series Q03UDECPU all versions, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU all versions, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number “24051” and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number “24051” and prior, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number “24051” and prior and Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number “24051” and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery. 2022-06-15 not yet calculated CVE-2022-24946
MISC
MISC
modern_events_calendar — lite Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors. 2022-06-16 not yet calculated CVE-2022-30533
MISC
MISC
monstra — monstra_cms Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability. 2022-06-15 not yet calculated CVE-2021-40940
MISC
mout — mout
 
This affects all versions of package mout. The deepFillIn function can be used to ‘fill missing properties recursively’, while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively is not checked, leading to exploiting this vulnerability. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7792](https://security.snyk.io/vuln/SNYK-JS-MOUT-1014544). 2022-06-17 not yet calculated CVE-2022-21213
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
naver — cloud_explorer Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection. 2022-06-13 not yet calculated CVE-2022-24077
CONFIRM
neorazorx — facturascripts
 
Cross-site Scripting (XSS) – Stored in GitHub repository neorazorx/facturascripts prior to 2022.06. 2022-06-13 not yet calculated CVE-2022-2065
MISC
CONFIRM
neorazorx — facturascripts
 
Cross-site Scripting (XSS) – Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06. 2022-06-13 not yet calculated CVE-2022-2066
MISC
CONFIRM
netgear — wnap320_router netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies. 2022-06-17 not yet calculated CVE-2022-31876
MISC
MISC
nocodb — ncodb Cross-site Scripting (XSS) – Stored in GitHub repository nocodb/nocodb prior to 0.91.7+. 2022-06-14 not yet calculated CVE-2022-2079
MISC
CONFIRM
nocodb — nocodb
 
Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+. 2022-06-13 not yet calculated CVE-2022-2064
MISC
CONFIRM
nocodb — nocodb
 
Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+. 2022-06-13 not yet calculated CVE-2022-2063
MISC
CONFIRM
nokia — bharti_airtel_routers
 
Nokia “G-2425G-A” Bharti Airtel Routers Hardware version “3FE48299DEAA” Software Version “3FE49362IJHK42” is vulnerable to Cross-Site Scripting (XSS) via the admin->Maintenance>Device Management. 2022-06-14 not yet calculated CVE-2022-30903
MISC
MISC
nokia — vitalsuite_spm
 
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName’. 2022-06-16 not yet calculated CVE-2021-41487
MISC
MISC
npm — pack
 
npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag (ie. `–workspaces`, `–workspace=<name>`). Anyone who has run `npm pack` or `npm publish` inside a workspace, as of v7.9.0 and v7.13.0 respectively, may be affected and have published files into the npm registry they did not intend to include. Users should upgrade to the latest, patched version of npm v8.11.0, run: npm i -g npm@latest . Node.js versions v16.15.1, v17.19.1, and v18.3.0 include the patched v8.11.0 version of npm. 2022-06-13 not yet calculated CVE-2022-29244
MISC
MISC
MISC
MISC
MISC
MISC
MISC
MISC
MISC
npm — pg-native
 
All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service (DoS) when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. **Note:** pg-native is a mere binding to npm’s libpq library, which in turn has the addons and bindings to the actual C libpq library. This means that problems found in pg-native may transitively impact npm’s libpq. 2022-06-17 not yet calculated CVE-2022-25852
CONFIRM
CONFIRM
npm — querymen
 
All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. Note: This vulnerability derives from an incomplete fix of [CVE-2020-7600](https://security.snyk.io/vuln/SNYK-JS-QUERYMEN-559867). 2022-06-17 not yet calculated CVE-2022-25871
CONFIRM
nuitka — nuitka
 
Command Injection in GitHub repository nuitka/nuitka prior to 0.9. 2022-06-12 not yet calculated CVE-2022-2054
CONFIRM
MISC
octokit — octokit
 
Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to `-rw-rw-rw-` (i.e. 0666) instead of `rw-r–r–` (i.e. 0644). This means everyone who is not the owner (Group and Public) with access to the instance where this release had been installed could modify the world-writable files from this gem. This issue is patched in Octokit 4.25.0. Two workarounds are available. Users can use the previous version of the gem, v4.22.0. Alternatively, users can modify the file permissions manually until they are able to upgrade to the latest version. 2022-06-15 not yet calculated CVE-2022-31072
MISC
CONFIRM
octokit — octopoller
 
Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to `-rw-rw-rw-` (i.e. 0666) instead of `rw-r–r–` (i.e. 0644). This means everyone who is not the owner (Group and Public) with access to the instance where this release had been installed could modify the world-writable files from this gem. This issue is patched in Octopoller 0.3.0. Two workarounds are available. Users can use the previous version of the gem, v0.1.0. Alternatively, users can modify the file permissions manually until they are able to upgrade to the latest version. 2022-06-15 not yet calculated CVE-2022-31071
CONFIRM
MISC
ompl — opml
 
Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior. 2022-06-17 not yet calculated CVE-2021-41490
MISC
online_tours_and_travels_management_system — online_tours_and_travels_management_system Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php. 2022-06-15 not yet calculated CVE-2022-32992
MISC
opc_foundation — opc_ua_net_standard_stack
 
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption. 2022-06-16 not yet calculated CVE-2022-29866
MISC
MISC
opc_foundation — opc_ua_net_standard_stack
 
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials. 2022-06-16 not yet calculated CVE-2022-29865
MISC
MISC
opc_foundation — opc_ua_net_standard_stack
 
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption. 2022-06-16 not yet calculated CVE-2022-29864
MISC
MISC
opc_foundation — opc_ua_net_standard_stack
 
OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation. 2022-06-16 not yet calculated CVE-2022-29863
MISC
MISC
opc_foundation — opc_ua_net_standard_stack
 
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message. 2022-06-16 not yet calculated CVE-2022-29862
MISC
MISC
open_forms — open_forms
 
Open Forms is an application for creating and publishing smart forms. Prior to versions 1.0.9 and 1.1.1, the cookie consent page in Open Forms contains an open redirect by injecting a `referer` querystring parameter and failing to validate the value. A malicious actor is able to redirect users to a website under their control, opening them up for phishing attacks. The redirect is initiated by the open forms backend which is a legimate page, making it less obvious to end users they are being redirected to a malicious website. Versions 1.0.9 and 1.1.1 contain patches for this issue. There are no known workarounds avaialble. 2022-06-13 not yet calculated CVE-2022-31040
MISC
CONFIRM
open_forms — open_forms
 
Open Forms is an application for creating and publishing smart forms. Open Forms supports file uploads as one of the form field types. These fields can be configured to allow only certain file extensions to be uploaded by end users (e.g. only PDF / Excel / …). The input validation of uploaded files is insufficient in versions prior to 1.0.9 and 1.1.1. Users could alter or strip file extensions to bypass this validation. This results in files being uploaded to the server that are of a different file type than indicated by the file name extension. These files may be downloaded (manually or automatically) by staff and/or other applications for further processing. Malicious files can therefore find their way into internal/trusted networks. Versions 1.0.9 and 1.1.1 contain patches for this issue. As a workaround, an API gateway or intrusion detection solution in front of open-forms may be able to scan for and block malicious content before it reaches the Open Forms application. 2022-06-13 not yet calculated CVE-2022-31041
CONFIRM
MISC
oracle — cloud_infrastructure
 
Vulnerability in the Oracle Cloud Infrastructure product of Oracle Cloud Services. Easily exploitable vulnerability allows high privileged attacker with network access to compromise Oracle Cloud Infrastructure. Successful attacks of this vulnerability can result in unauthorized access to Oracle Cloud Infrastructure accessible data. All affected customers were notified of CVE-2022-21503 by Oracle. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) 2022-06-17 not yet calculated CVE-2022-21503
MISC
oracle — linux_uek
 
The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file descriptor to a socket to be closed and freed while it was still in use by another portion of the kernel. An attack with local access can operate on the socket, and cause a denial of service. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). 2022-06-14 not yet calculated CVE-2022-21504
MISC
otrs — otrs Attacker is able to determine if the provided username exists (and it’s valid) using Request New Password feature, based on the response time. 2022-06-13 not yet calculated CVE-2022-32741
CONFIRM
otrs — otrs When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number. 2022-06-13 not yet calculated CVE-2022-32739
CONFIRM
otrs — otrs A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances. 2022-06-13 not yet calculated CVE-2022-32740
CONFIRM
palantir — multipass
 
The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization operations. A malicious attacker could perform an application-level denial of service attack, potentially causing authentication and/or authorization operations to fail for the duration of the attack. This could lead to performance degradation or login failures for customer Palantir Foundry environments. This vulnerability is resolved in Multipass 3.647.0. This issue affects: Palantir Foundry Multipass versions prior to 3.647.0. 2022-06-14 not yet calculated CVE-2022-27889
MISC
parse_community — parse_server
 
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 4.10.11 and 5.2.2, the certificate in the Parse Server Apple Game Center auth adapter not validated. As a result, authentication could potentially be bypassed by making a fake certificate accessible via certain Apple domains and providing the URL to that certificate in an authData object. Versions 4.0.11 and 5.2.2 prevent this by introducing a new `rootCertificateUrl` property to the Parse Server Apple Game Center auth adapter which takes the URL to the root certificate of Apple’s Game Center authentication certificate. If no value is set, the `rootCertificateUrl` property defaults to the URL of the current root certificate as of May 27, 2022. Keep in mind that the root certificate can change at any time and that it is the developer’s responsibility to keep the root certificate URL up-to-date when using the Parse Server Apple Game Center auth adapter. There are no known workarounds for this issue. 2022-06-17 not yet calculated CVE-2022-31083
MISC
CONFIRM
MISC
MISC
peel — shopping_cms
 
PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the administrator group can inject a malicious SQL query in order to affect the execution logic of the application and retrive information from the database. 2022-06-15 not yet calculated CVE-2021-41672
MISC
MISC
phpcms — phpcms There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side. 2022-06-15 not yet calculated CVE-2021-40910
MISC
php — fedora
 
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service. 2022-06-16 not yet calculated CVE-2022-31625
MISC
FEDORA
FEDORA
php — fedora
 
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability. 2022-06-16 not yet calculated CVE-2022-31626
MISC
FEDORA
FEDORA
piwigo — piwigo In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit. 2022-06-14 not yet calculated CVE-2021-40678
MISC
potplayer — potplayer
 
An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and denial of service. 2022-06-15 not yet calculated CVE-2021-40212
MISC
MISC
powerjob — powerjob
 
An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save. 2022-06-16 not yet calculated CVE-2020-28865
MISC
powertek_corporation — powertek_firmware 
 
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface (/cgi/get_param.cgi) with the tmpToken cookie set to an empty string followed by a semicolon. This bypasses an active session authorization check. This can be then used to fetch the values of protected sys.passwd and sys.su.name fields that contain the username and password in cleartext. 2022-06-13 not yet calculated CVE-2022-33174
MISC
powertek_corporation — powertek_firmware 
 
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions setting on the user.token field that is accessible to everyone through the /cgi/get_param.cgi HTTP API. This leads to disclosing active session ids of currently logged-in administrators. The session id can then be reused to act as the administrator, allowing reading of the cleartext password, or reconfiguring the device. 2022-06-13 not yet calculated CVE-2022-33175
MISC
proietti — tech_srl_planet_time_enterprise Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is vulnerable to Remote code execution via the Viewstate parameter. 2022-06-17 not yet calculated CVE-2022-30422
MISC
MISC
python — pgadmin4
 
A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2022-06-16 not yet calculated CVE-2017-20052
MISC
MISC
python-idap — python_idap
 
python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition. 2022-06-18 not yet calculated CVE-2021-46823
MISC
MISC
qualcomm — snapdragon Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35096
CONFIRM
qualcomm — snapdragon Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35130
CONFIRM
qualcomm — snapdragon Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35102
CONFIRM
qualcomm — snapdragon Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35098
CONFIRM
qualcomm — snapdragon Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking 2022-06-14 not yet calculated CVE-2021-35129
CONFIRM
qualcomm — snapdragon Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35101
CONFIRM
qualcomm — snapdragon Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35087
CONFIRM
qualcomm — snapdragon Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35091
CONFIRM
qualcomm — snapdragon Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35090
CONFIRM
qualcomm — snapdragon Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35111
CONFIRM
qualcomm — snapdragon Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35095
CONFIRM
qualcomm — snapdragon Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35126
CONFIRM
qualcomm — snapdragon Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT 2022-06-14 not yet calculated CVE-2021-35123
CONFIRM
qualcomm — snapdragon Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-30334
CONFIRM
qualcomm — snapdragon Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35094
CONFIRM
qualcomm — snapdragon Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-30350
CONFIRM
qualcomm — snapdragon Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35078
CONFIRM
qualcomm — snapdragon RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35070
CONFIRM
qualcomm — snapdragon Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35086
CONFIRM
qualcomm — snapdragon Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-30340
CONFIRM
qualcomm — snapdragon RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking 2022-06-14 not yet calculated CVE-2021-30346
CONFIRM
qualcomm — snapdragon Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has been received in Snapdragon Industrial IOT 2022-06-14 not yet calculated CVE-2021-35082
CONFIRM
qualcomm — snapdragon Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35079
CONFIRM
qualcomm — snapdragon APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35116
CONFIRM
qualcomm — snapdragon Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35076
CONFIRM
qualcomm — snapdragon Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35073
CONFIRM
qualcomm — snapdragon Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35072
CONFIRM
qualcomm — snapdragon Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35080
CONFIRM
qualcomm — snapdragon Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35085
CONFIRM
qualcomm — snapdragon Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking 2022-06-14 not yet calculated CVE-2021-30349
CONFIRM
qualcomm — snapdragon Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-30347
CONFIRM
qualcomm — snapdragon Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking 2022-06-14 not yet calculated CVE-2021-35071
CONFIRM
qualcomm — snapdragon
 
Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35100
CONFIRM
qualcomm — snapdragon
 
Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music 2022-06-14 not yet calculated CVE-2021-35092
CONFIRM
qualcomm — snapdragon
 
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music 2022-06-14 not yet calculated CVE-2021-35081
CONFIRM
qualcomm — snapdragon
 
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking 2022-06-14 not yet calculated CVE-2021-30345
CONFIRM
qualcomm — snapdragon
 
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-30341
CONFIRM
qualcomm — snapdragon
 
Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music 2022-06-14 not yet calculated CVE-2022-25651
CONFIRM
qualcomm — snapdragon
 
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking 2022-06-14 not yet calculated CVE-2021-30339
CONFIRM
qualcomm — snapdragon
 
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music 2022-06-14 not yet calculated CVE-2021-30327
CONFIRM
qualcomm — snapdragon
 
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35083
CONFIRM
qualcomm — snapdragon
 
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-30342
CONFIRM
qualcomm — snapdragon
 
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-30343
CONFIRM
qualcomm — snapdragon
 
A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35112
CONFIRM
qualcomm — snapdragon
 
Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35120
CONFIRM
qualcomm — snapdragon
 
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-30344
CONFIRM
qualcomm — snapdragon
 
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2021-35118
CONFIRM
qualcomm — snapdragon
 
An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35121
CONFIRM
qualcomm — snapdragon
 
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking 2022-06-14 not yet calculated CVE-2021-35104
CONFIRM
qualcomm — snapdragon
 
Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2021-35119
CONFIRM
qualcomm — snapdragon
 
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking 2022-06-14 not yet calculated CVE-2021-30281
CONFIRM
qualcomm — snapdragon
 
Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music 2022-06-14 not yet calculated CVE-2021-35084
CONFIRM
qualcomm — snapdragon_auto Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto 2022-06-14 not yet calculated CVE-2021-35114
CONFIRM
qualcomm — snapdrgaon Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22065
CONFIRM
qualcomm — snapdrgaon
 
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22068
CONFIRM
qualcomm — snapdrgaon
 
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music 2022-06-14 not yet calculated CVE-2022-22071
CONFIRM
qualcomm — snapdrgaon
 
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22082
CONFIRM
qualcomm — snapdrgaon
 
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22084
CONFIRM
qualcomm — snapdrgaon
 
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22087
CONFIRM
qualcomm — snapdrgaon
 
Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music 2022-06-14 not yet calculated CVE-2022-22072
CONFIRM
qualcomm — snapdrgaon
 
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22064
CONFIRM
qualcomm — snapdrgaon
 
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22083
CONFIRM
qualcomm — snapdrgaon
 
Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile 2022-06-14 not yet calculated CVE-2022-22090
CONFIRM
qualcomm — snapdrgaon
 
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22086
CONFIRM
qualcomm — snapdrgaon
 
Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22057
CONFIRM
qualcomm — snapdrgaon
 
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 2022-06-14 not yet calculated CVE-2022-22085
CONFIRM
qualcomm — snapdrgaon
 
Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto 2022-06-14 not yet calculated CVE-2022-22103
CONFIRM
qualcomm — trustzone_memory_interface
 
Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Compute 2022-06-14 not yet calculated CVE-2021-30338
CONFIRM
rakuten — casa
 
Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information stored in the product because the product is set to accept HTTP connections from the WAN side by default. 2022-06-13 not yet calculated CVE-2022-26834
MISC
MISC
rakuten — casa
 
Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default settings in which is set to accept SSH connections from the WAN side, and is also connected to the Internet with the authentication information unchanged from the default settings. 2022-06-13 not yet calculated CVE-2022-28704
MISC
MISC
rakuten — casa
 
Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation. 2022-06-13 not yet calculated CVE-2022-29525
MISC
MISC
redcap — redacap
 
A Stored Cross-Site Scripting (XSS) vulnerability was discovered in Messenger/messenger_ajax.php in REDCap 12.0.11. This issue allows any authenticated user to inject arbitrary code into the messenger title (aka new_title) field when editing an existing conversation. The payload executes in the browser of any conversation participant with the sidebar shown. 2022-06-15 not yet calculated CVE-2022-24004
MISC
MISC
redcap — redacap
 
A Stored Cross-Site Scripting (XSS) vulnerability was discovered in ProjectGeneral/edit_project_settings.php in REDCap 12.0.11. This issue allows any user with project management permissions to inject arbitrary code into the project title (app_title) field when editing an existing project. The payload is then reflected within the title tag of the page. 2022-06-15 not yet calculated CVE-2022-24127
MISC
MISC
robohelp — server
 
RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction. 2022-06-16 not yet calculated CVE-2022-30670
MISC
rundeck — rundeck
 
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.2.0 and 4.2.1, resulting in use of the encryption layer for Key Storage possibly not working. Any credentials created or overwritten using Rundeck 4.2.0 or 4.2.1 might result in them being written in plaintext to the backend storage. This affects those using any `Storage Converter` plugin. Rundeck 4.3.1 and 4.2.2 have fixed the code and upon upgrade will re-encrypt any plain text values. Version 4.3.0 does not have the vulnerability, but does not include the patch to re-encrypt plain text values if 4.2.0 or 4.2.1 were used. To prevent plaintext credentials from being stored in Rundeck 4.2.0/4.2.1, write access to key storage can be disabled via ACLs. After upgrading to 4.3.1 or later, write access can be restored. 2022-06-15 not yet calculated CVE-2022-31044
CONFIRM
sap — 3d_visual_enterprise_viewer When a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. 2022-06-14 not yet calculated CVE-2022-32235
MISC
MISC
sap — 3d_visual_enterprise_viewer When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. 2022-06-14 not yet calculated CVE-2022-32239
MISC
MISC
sap — 3d_visual_enterprise_viewer When a user opens manipulated Radiance Picture (.hdr, hdr.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. 2022-06-14 not yet calculated CVE-2022-32242
MISC
MISC
sap — 3d_visual_enterprise_viewer When a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. 2022-06-14 not yet calculated CVE-2022-32241
MISC
MISC
sap — 3d_visual_enterprise_viewer When a user opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. 2022-06-14 not yet calculated CVE-2022-32240
MISC
MISC
sap — 3d_visual_enterprise_viewer When a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. 2022-06-14 not yet calculated CVE-2022-32236
MISC
MISC
sap — 3d_visual_enterprise_viewer When a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. 2022-06-14 not yet calculated CVE-2022-32237
MISC
MISC
sap — 3d_visual_enterprise_viewer
 
When a user opens manipulated Encapsulated Post Script (.eps, ai.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. 2022-06-14 not yet calculated CVE-2022-32238
MISC
MISC
sap — financial_consolidation
 
SAP Financial Consolidation – version 1010,?does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. 2022-06-14 not yet calculated CVE-2022-31595
MISC
MISC
sap — netweaver
 
Depending on the configuration of the route permission table in file ‘saprouttab’, it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and ABAP Platform – versions KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.49, KRNL64UC 7.49, SAP_ROUTER 7.53, 7.22, from a remote client, for example stopping the SAProuter, that could highly impact systems availability. 2022-06-14 not yet calculated CVE-2022-27668
MISC
MISC
sap — netweaver
 
Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) – versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to inject script into the URL and execute code in the user’s browser. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application. 2022-06-14 not yet calculated CVE-2022-29618
MISC
MISC
sap — netweaver
 
Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untrusted source, which allows an adversary to exploit unprotected XML parking at endpoints, and a possibility to conduct SSRF attacks that could compromise system’s Availability by causing system to crash. 2022-06-13 not yet calculated CVE-2022-28217
MISC
MISC
sap — netweaver
 
SAP NetWeaver, ABAP Platform and SAP Host Agent – versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticated user to misuse a function of sapcontrol webfunctionality(startservice) in Kernel which enables malicious users to retrieve information. On successful exploitation, an attacker can obtain technical information like system number or physical address, which is otherwise restricted, causing a limited impact on the confidentiality of the application. 2022-06-14 not yet calculated CVE-2022-29612
MISC
MISC
sap — netweaver
 
SAP startservice – of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database – versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, – on Unix systems, s-bit helper program sapuxuserchk, can be abused physically resulting in a privilege escalation of an attacker leading to low impact on confidentiality and integrity, but a profound impact on availability. 2022-06-14 not yet calculated CVE-2022-29614
MISC
MISC
sap — netweaver
 
SAP NetWeaver Developer Studio (NWDS) – version 7.50, is based on Eclipse, which contains the logging framework log4j in version 1.x. The application’s confidentiality and integrity could have a low impact due to the vulnerabilities associated with version 1.x. 2022-06-14 not yet calculated CVE-2022-29615
MISC
MISC
sap — one_support_launchpad
 
A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system. 2022-06-14 not yet calculated CVE-2022-31594
MISC
MISC
sap — one_support_launchpad
 
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted. 2022-06-14 not yet calculated CVE-2022-31589
MISC
MISC
sap — powerdesigner_proxy SAP PowerDesigner Proxy – version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system. 2022-06-14 not yet calculated CVE-2022-31590
MISC
MISC
scalanace — multiple_versions
 
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device. 2022-06-14 not yet calculated CVE-2021-37182
MISC
shirasagi — shirasagi
 
Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via unspecified vectors. 2022-06-14 not yet calculated CVE-2022-29485
MISC
MISC
MISC
MISC
sicam — gridedge_essential_arm
 
A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed. 2022-06-14 not yet calculated CVE-2022-30228
MISC
sicam — gridedge_essential_arm
 
A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of an user, such as credentials, in case that user’s id is known. 2022-06-14 not yet calculated CVE-2022-30229
MISC
sicam — gridedge_essential_arm
 
A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions. 2022-06-14 not yet calculated CVE-2022-30230
MISC
sicam — gridedge_essential_arm
 
A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash. 2022-06-14 not yet calculated CVE-2022-30231
MISC
siemens — sinema_remote_connect_server
 
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected application does not prevent injection of JavaScript code. This could allow attackers to perform reflected cross-site scripting (XSS) attacks. 2022-06-14 not yet calculated CVE-2022-29034
MISC
FULLDISC
siemens — spectrum_power_4
 
A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). An unauthenticated attacker could log into the component Shared HIS used in Spectrum Power systems by using an account with default credentials. A successful exploitation could allow the attacker to access the component Shared HIS with administrative privileges. 2022-06-14 not yet calculated CVE-2022-26476
MISC
siemens — teamcenter
 
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the application allows a user to perform a series of actions that could potentially lead to remote code execution with elevated permissions. 2022-06-14 not yet calculated CVE-2022-31619
MISC
siemens — teamcenter_active_workspace
 
A vulnerability has been identified in Teamcenter Active Workspace V5.2 (All versions < V5.2.9), Teamcenter Active Workspace V6.0 (All versions < V6.0.3). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious code by tricking users into accessing a malicious link. 2022-06-14 not yet calculated CVE-2022-32145
MISC
siemens — sinema_remote_connect_server
 
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 443. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors. 2022-06-14 not yet calculated CVE-2022-27219
MISC
siemens — sinema_remote_connect_server
 
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-the-middle could obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a “BREACH” attack. 2022-06-14 not yet calculated CVE-2022-27221
MISC
siemens — sinema_remote_connect_server
 
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 6220. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors. 2022-06-14 not yet calculated CVE-2022-27220
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older feature that allows to import device configurations via a specific endpoint. An attacker could use this vulnerability for information disclosure. 2022-06-14 not yet calculated CVE-2022-32258
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). There is a missing authentication verification for a resource used to change the roles and permissions of a user. This could allow an attacker to change the permissions of any user and gain the privileges of an administrative user. 2022-06-14 not yet calculated CVE-2022-32251
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios. 2022-06-14 not yet calculated CVE-2022-32260
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with test configuration. 2022-06-14 not yet calculated CVE-2022-32259
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application. 2022-06-14 not yet calculated CVE-2022-32261
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to limited information. 2022-06-14 not yet calculated CVE-2022-32255
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an attacker. 2022-06-14 not yet calculated CVE-2022-32254
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL certificate’s password could be printed to a file reachable by an attacker. 2022-06-14 not yet calculated CVE-2022-32253
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker. 2022-06-14 not yet calculated CVE-2022-32252
MISC
sinema — remote_connect_server When a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. 2022-06-14 not yet calculated CVE-2022-32243
MISC
MISC
sinema — remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information. 2022-06-14 not yet calculated CVE-2022-32256
MISC
sinema — remote_connect_server
 
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload server that is vulnerable to command injection. An attacker could use this to achieve arbitrary code execution. 2022-06-14 not yet calculated CVE-2022-32262
MISC
sourcecodester — online_discussion_forum_site Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team. 2022-06-16 not yet calculated CVE-2022-31911
MISC
sourcecodester — online_discussion_forum_site Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name. 2022-06-16 not yet calculated CVE-2022-31913
MISC
sourcecodester — zoo_management_system Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24. 2022-06-16 not yet calculated CVE-2022-31914
MISC
sourcecodester — bank_management_system
 
A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1’and 1=2 union select 1,sleep(10),3,4,5 –+ leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2022-06-15 not yet calculated CVE-2022-2086
N/A
N/A
sourcecodester — bank_management_system
 
A vulnerability, which was classified as problematic, was found in SourceCodester Bank Management System 1.0. This affects the file /mnotice.php?id=2. The manipulation of the argument notice with the input <script>alert(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2022-06-15 not yet calculated CVE-2022-2087
N/A
N/A
sourcecodester — church_management_system
 
Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the /uploads directory. This can lead to RCE on the web server by uploading a PHP webshell. 2022-06-13 not yet calculated CVE-2021-41661
MISC
sourcecodester — fast_food_ordering_system Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_menu. 2022-06-14 not yet calculated CVE-2022-32330
MISC
sourcecodester — fast_food_ordering_system Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/view_category.php?id=. 2022-06-14 not yet calculated CVE-2022-32331
MISC
sourcecodester — fast_food_ordering_system Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_category. 2022-06-14 not yet calculated CVE-2022-32332
MISC
sourcecodester — fast_food_ordering_system Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/view_menu.php?id=. 2022-06-14 not yet calculated CVE-2022-32336
MISC
sourcecodester — fast_food_ordering_system Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/manage_category.php?id=. 2022-06-14 not yet calculated CVE-2022-32334
MISC
sourcecodester — fast_food_ordering_system Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=. 2022-06-14 not yet calculated CVE-2022-32333
MISC
sourcecodester — fast_food_ordering_system Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/manage_menu.php?id=. 2022-06-14 not yet calculated CVE-2022-32335
MISC
sourcecodester — fast_food_ordering_system Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=delete_img. 2022-06-14 not yet calculated CVE-2022-32328
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient. 2022-06-14 not yet calculated CVE-2022-32344
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_room_type. 2022-06-14 not yet calculated CVE-2022-32350
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/view_doctor.php?id=. 2022-06-14 not yet calculated CVE-2022-32339
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/manage_doctor.php?id=. 2022-06-14 not yet calculated CVE-2022-32338
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/patients/manage_patient.php?id=. 2022-06-14 not yet calculated CVE-2022-32337
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/room_types/view_room_type.php?id=. 2022-06-14 not yet calculated CVE-2022-32342
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via hprms/admin/room_types/manage_room_type.php?id=. 2022-06-14 not yet calculated CVE-2022-32343
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_history. 2022-06-14 not yet calculated CVE-2022-32349
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/manage_room.php?id=. 2022-06-14 not yet calculated CVE-2022-32345
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_room. 2022-06-14 not yet calculated CVE-2022-32347
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_doctor. 2022-06-14 not yet calculated CVE-2022-32348
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=user/manage_user&id=. 2022-06-14 not yet calculated CVE-2022-32341
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_admission. 2022-06-14 not yet calculated CVE-2022-32352
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_message. 2022-06-14 not yet calculated CVE-2022-32351
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/view_room.php?id=. 2022-06-14 not yet calculated CVE-2022-32346
MISC
sourcecodester — hospitals_patient_records_management_system Hospital’s Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/view_patient&id=. 2022-06-14 not yet calculated CVE-2022-32340
MISC
sourcecodester — online_fire_reporting_system Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php. 2022-06-16 not yet calculated CVE-2022-31906
MISC
sourcecodester — online_fire_reporting_system Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php. 2022-06-14 not yet calculated CVE-2022-31415
MISC
sourcecodester — online_tutor_portal_site Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=delete_team. 2022-06-16 not yet calculated CVE-2022-31912
MISC
sourcecodester — online_tutor_portal_site Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting (XSS). via /otps/classes/Master.php. 2022-06-16 not yet calculated CVE-2022-31910
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/manage_field.php?id=. 2022-06-14 not yet calculated CVE-2022-32365
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manage_user&id=. 2022-06-14 not yet calculated CVE-2022-32354
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/view_category.php?id=. 2022-06-14 not yet calculated CVE-2022-32363
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/view_field.php?id=. 2022-06-14 not yet calculated CVE-2022-32366
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manage_product&id=. 2022-06-14 not yet calculated CVE-2022-32364
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_field_order.php?id=. 2022-06-14 not yet calculated CVE-2022-32353
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/view_product&id=. 2022-06-14 not yet calculated CVE-2022-32355
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/view_inquiry&id=. 2022-06-14 not yet calculated CVE-2022-32367
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_category. 2022-06-14 not yet calculated CVE-2022-32359
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_inquiry. 2022-06-14 not yet calculated CVE-2022-32358
MISC
sourcecodester — product_show_room_site Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_category.php?id=. 2022-06-14 not yet calculated CVE-2022-32362
MISC
sourcecodester — rescue_dispatch_management_system Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manage_user&id=. 2022-06-17 not yet calculated CVE-2022-31941
MISC
sourcecodester — south_gate_inn_online_reservation_system The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution. 2022-06-13 not yet calculated CVE-2021-41662
MISC
sourcecodester — student_registration_and_fee_payment_system Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php. 2022-06-16 not yet calculated CVE-2022-31908
MISC
sourcecodester — theme_park_ticketing_system Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edit_ticket.php. 2022-06-15 not yet calculated CVE-2022-32302
MISC
sourcesodester — directory_management_system Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php. 2022-06-16 not yet calculated CVE-2022-31384
MISC
MISC
MISC
sourcesodester — directory_management_system
 
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php. 2022-06-16 not yet calculated CVE-2022-31383
MISC
MISC
MISC
sourcesodester — directory_management_system
 
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php. 2022-06-16 not yet calculated CVE-2022-31382
MISC
MISC
MISC
sourcesodester — online_discussion_forum_site An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts. 2022-06-16 not yet calculated CVE-2022-31295
MISC
MISC
sourcesodester — online_discussion_forum_site An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts. 2022-06-16 not yet calculated CVE-2022-31294
MISC
MISC
sourcesodester — online_discussion_forum_site Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php. 2022-06-17 not yet calculated CVE-2022-31296
MISC
MISC
sourcesodester — online_ordering_system Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=. 2022-06-17 not yet calculated CVE-2022-31355
MISC
sourcesodester — online_ordering_system Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=. 2022-06-17 not yet calculated CVE-2022-31357
MISC
sourcesodester — online_ordering_system Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=. 2022-06-17 not yet calculated CVE-2022-31356
MISC
splunk_enterprise — splunk_universal_forwarder
 
In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface (CLI) did not validate TLS certificates while connecting to a remote Splunk platform instance by default. Splunk peer communications configured properly with valid certificates were not vulnerable. However, connections from misconfigured nodes without valid certificates did not fail by default. After updating to version 9.0, see Configure TLS host name validation for the Splunk CLI (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation#Configure_TLS_host_name_validation_for_the_Splunk_CLI) to enable the remediation. 2022-06-15 not yet calculated CVE-2022-32156
CONFIRM
CONFIRM
CONFIRM
splunk_enterprise — dashboard
 
Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token when the token is used in a query in a cross-origin request. The result bypasses SPL safeguards for risky commands. See New capabilities can limit access to some custom and potentially risky commands (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/SPLsafeguards#New_capabilities_can_limit_access_to_some_custom_and_potentially_risky_commands) for more information. Note that the attack is browser-based and an attacker cannot exploit it at will. 2022-06-15 not yet calculated CVE-2022-32154
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
splunk_enterprise — splunk_enterprise_deployment_servers
 
Splunk Enterprise deployment servers in versions before 9.0 let clients deploy forwarder bundles to other deployment clients through the deployment server. An attacker that compromised a Universal Forwarder endpoint could use the vulnerability to execute arbitrary code on all other Universal Forwarder endpoints subscribed to the deployment server. 2022-06-15 not yet calculated CVE-2022-32158
CONFIRM
CONFIRM
splunk_enterprise — splunk_enterprise_deployment_servers
 
Splunk Enterprise deployment servers in versions before 9.0 allow unauthenticated downloading of forwarder bundles. Remediation requires you to update the deployment server to version 9.0 and Configure authentication for deployment servers and clients (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/ConfigDSDCAuthEnhancements#Configure_authentication_for_deployment_servers_and_clients). Once enabled, deployment servers can manage only Universal Forwarder versions 9.0 and higher. Though the vulnerability does not directly affect Universal Forwarders, remediation requires updating all Universal Forwarders that the deployment server manages to version 9.0 or higher prior to enabling the remediation. 2022-06-15 not yet calculated CVE-2022-32157
CONFIRM
CONFIRM
CONFIRM
CONFIRM
splunk_enterprise — splunk_enterprise_peers Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default. Splunk peer communications configured properly with valid certificates were not vulnerable. However, an attacker with administrator credentials could add a peer without a valid certificate and connections from misconfigured nodes without valid certificates did not fail by default. For Splunk Enterprise, update to Splunk Enterprise version 9.0 and Configure TLS host name validation for Splunk-to-Splunk communications (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation) to enable the remediation. 2022-06-15 not yet calculated CVE-2022-32153
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
splunk_enterprise — splunk_enterprise_peers
 
The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority (CA) certificate stores by default in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203. Python 3 client libraries now verify server certificates by default and use the appropriate CA certificate stores for each library. Apps and add-ons that include their own HTTP libraries are not affected. For Splunk Enterprise, update to Splunk Enterprise version 9.0 and Configure TLS host name validation for Splunk-to-Splunk communications (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation) to enable the remediation. 2022-06-15 not yet calculated CVE-2022-32151
CONFIRM
CONFIRM
CONFIRM
CONFIRM
splunk_enterprise — splunk_enterprise_peers
 
Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default. Splunk peer communications configured properly with valid certificates were not vulnerable. However, an attacker with administrator credentials could add a peer without a valid certificate and connections from misconfigured nodes without valid certificates did not fail by default. For Splunk Enterprise, update to Splunk Enterprise version 9.0 and Configure TLS host name validation for Splunk-to-Splunk communications (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation) to enable the remediation. 2022-06-15 not yet calculated CVE-2022-32152
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
splunk_enterprise — splunk_universal_forwarder
 
In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potential exposure, but it is not a vulnerability. If exposed, we recommend each customer assess the potential severity specific to your environment. In 9.0, the universal forwarder now binds the management port to localhost preventing remote logins by default. If management services are not required in versions before 9.0, set disableDefaultPort = true in server.conf OR allowRemoteLogin = never in server.conf OR mgmtHostPort = localhost in web.conf. See Configure universal forwarder management security (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation#Configure_universal_forwarder_management_security) for more information on disabling the remote management services. 2022-06-15 not yet calculated CVE-2022-32155
CONFIRM
CONFIRM
CONFIRM
strapi — strapi
 
Strapi v3.x.x versions and earlier contain a stored cross-site scripting vulnerability in file upload function. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege. 2022-06-13 not yet calculated CVE-2022-29894
MISC
MISC
MISC
subscription-manager — subscription-manager Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter. 2022-06-15 not yet calculated CVE-2021-41415
MISC
synaptics — fingerprint_driver
 
Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64. 2022-06-16 not yet calculated CVE-2021-3675
MISC
CONFIRM
MISC
tenda — hg9 Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function. 2022-06-16 not yet calculated CVE-2022-30023
MISC
MISC
MISC
textpattern — textpattern Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”. 2022-06-14 not yet calculated CVE-2021-40658
MISC
thinkcmf — thinkcmf
 
thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required. 2022-06-14 not yet calculated CVE-2021-40616
MISC
thomson — tcw710
 
A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2022-06-12 not yet calculated CVE-2018-25039
MISC
MISC
thomson — tcw710
 
A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2022-06-12 not yet calculated CVE-2018-25037
MISC
MISC
thomson — tcw710
 
A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2022-06-12 not yet calculated CVE-2018-25036
MISC
MISC
thomson — tcw710
 
A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2022-06-12 not yet calculated CVE-2018-25035
MISC
MISC
thomson — tcw710
 
A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2022-06-12 not yet calculated CVE-2018-25034
MISC
MISC
thomson — tcw710
 
A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2022-06-12 not yet calculated CVE-2018-25038
MISC
MISC
topsec — topidp3000
 
An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted session_id cookie. 2022-06-14 not yet calculated CVE-2022-31273
MISC
tourism_management_system_version — tourism_management_system_version Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF). 2022-06-14 not yet calculated CVE-2022-30930
MISC
MISC
trendnet — tew-831dr
 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacker can change the pre-shared key of the Wi-Fi router if the interface’s IP address is known. 2022-06-16 not yet calculated CVE-2022-30327
MISC
MISC
trendnet — tew-831dr
 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default pre-shared key for both 2.4 GHz and 5 GHz networks can be guessed or brute-forced by an attacker within range of the Wi-Fi network. 2022-06-16 not yet calculated CVE-2022-30325
MISC
MISC
trendnet — tew-831dr
 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. An OS injection vulnerability exists within the web interface, allowing an attacker with valid credentials to execute arbitrary shell commands. 2022-06-16 not yet calculated CVE-2022-30329
MISC
MISC
trendnet — tew-831dr
 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and password of the interface. 2022-06-16 not yet calculated CVE-2022-30328
MISC
MISC
trendnet — tew-831dr
 
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interface is vulnerable to XSS. An attacker can use a simple XSS payload to crash the basic.config page of the web interface. 2022-06-16 not yet calculated CVE-2022-30326
MISC
MISC
trendnet — ip-110wn Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname parameter in /admin/scheprofile.cgi 2022-06-17 not yet calculated CVE-2022-31875
MISC
trendnet — ip-110wn Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix parameter in /admin/general.cgi. 2022-06-17 not yet calculated CVE-2022-31873
MISC
typo3 — typo3 TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, system internal credentials or keys (e.g. database credentials) can be logged as plaintext in exception handlers, when logging the complete exception stack trace. TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, 11.5.11 contain a fix for the problem. 2022-06-14 not yet calculated CVE-2022-31047
MISC
CONFIRM
MISC
typo3 — typo3 TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool sessions initiated via the TYPO3 backend user interface had not been revoked even if the corresponding user account was degraded to lower permissions or disabled completely. This way, sessions in the admin tool theoretically could have been prolonged without any limit. TYPO3 versions 9.5.34 ELTS, 10.4.29, and 11.5.11 contain a fix for the problem. 2022-06-14 not yet calculated CVE-2022-31050
MISC
CONFIRM
MISC
typo3 — typo3
 
TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the export functionality fails to limit the result set to allowed columns of a particular database table. This way, authenticated users can export internal details of database tables they already have access to. TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, 11.5.11 fix the problem described above. In order to address this issue, access to mentioned export functionality is completely denied for regular backend users. 2022-06-14 not yet calculated CVE-2022-31046
MISC
CONFIRM
MISC
typo3 — typo3
 
TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit this vulnerability. TYPO3 versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11 contain a fix for the problem. 2022-06-14 not yet calculated CVE-2022-31048
MISC
CONFIRM
MISC
typo3 — typo3
 
TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user submitted content was used without being properly encoded in HTML emails sent to users. The actually affected components were mail clients used to view those messages. TYPO3 versions 9.5.34 ELTS, 10.4.29, and 11.5.11 contain a fix for the problem. 2022-06-14 not yet calculated CVE-2022-31049
MISC
MISC
CONFIRM
u5cms — u5cms u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS). When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? “Onmouseover=%27tzgl (96502)%27bad=”, it can cause html injection. 2022-06-17 not yet calculated CVE-2022-32442
MISC
u5cms — u5cms
 
An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user’s browser to be redirected to another site via /loginsave.php. 2022-06-17 not yet calculated CVE-2022-32444
MISC
utorrent — utorrent A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. 2022-06-17 not yet calculated CVE-2018-25041
MISC
MISC
MISC
MISC
utorrent — utorrent
 
A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component. 2022-06-17 not yet calculated CVE-2018-25042
MISC
MISC
MISC
utorrent — utorrent
 
A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. 2022-06-17 not yet calculated CVE-2018-25043
MISC
MISC
MISC
utorrent — utorrent
 
A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component Guest Account. The manipulation leads to privilege escalation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. 2022-06-17 not yet calculated CVE-2018-25044
MISC
MISC
MISC
utorrent — web
 
A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HTTP RPC Server. The manipulation leads to privilege escalation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. 2022-06-17 not yet calculated CVE-2018-25040
MISC
MISC
MISC
victor_cms — victor_cms
 
Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_update_categories.php. 2022-06-16 not yet calculated CVE-2020-35597
MISC
MISC
MISC
vmware — hcx
 
VMware HCX update addresses an information disclosure vulnerability. A malicious actor with network user access to the VMware HCX appliance may be able to gain access to sensitive information. 2022-06-16 not yet calculated CVE-2022-22953
MISC
vmware — .net_and_visual_studio .NET and Visual Studio Information Disclosure Vulnerability. 2022-06-15 not yet calculated CVE-2022-30184
MISC
voipmonitor — web_gui
 
VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the “api.php” file and “user” parameter. 2022-06-17 not yet calculated CVE-2021-41408
MISC
MISC
wavlink — wn579 A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted POST request. 2022-06-14 not yet calculated CVE-2022-31847
MISC
wavlink — wn579 A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function. 2022-06-14 not yet calculated CVE-2022-31845
MISC
MISC
wavlink — wn579 A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function. 2022-06-14 not yet calculated CVE-2022-31846
MISC
MISC
wavlink — aerial
 
A vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via execution of the exec cmd function. 2022-06-14 not yet calculated CVE-2022-31308
MISC
wavlink — aerial
 
An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request. 2022-06-14 not yet calculated CVE-2022-31311
MISC
wavlink — aerial
 
A vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via execution of the exec cmd function. 2022-06-14 not yet calculated CVE-2022-31309
MISC
web_based_quiz_systems — web_based_quiz_systems Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php. 2022-06-15 not yet calculated CVE-2022-32991
MISC
weblizar — user_login_log_plugin
 
A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Stored). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2022-06-16 not yet calculated CVE-2017-20056
MISC
MISC
MISC
webtareas — webtareas Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php. 2022-06-16 not yet calculated CVE-2021-36609
MISC
webtareas — webtareas
 
Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php. 2022-06-16 not yet calculated CVE-2021-36608
MISC
windows — autopilot_device_management_and_enrollment_client Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability. 2022-06-15 not yet calculated CVE-2022-30189
MISC
wiris — mathtype
 
Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted request to the resource handler. 2022-06-16 not yet calculated CVE-2022-31372
MISC
wordpre4ss — phil_bakers_gate_plugin
 
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Phil Baker’s Age Gate plugin <= 2.17.0 at WordPress. 2022-06-15 not yet calculated CVE-2021-36901
CONFIRM
CONFIRM
wordpress — admin_management_xtended
 
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Admin Management Xtended plugin <= 2.4.4 at WordPress. 2022-06-15 not yet calculated CVE-2022-29450
CONFIRM
CONFIRM
wordpress — api_key_for_google_maps
 
Cross-Site Request Forgery (CSRF) vulnerability in API KEY for Google Maps plugin <= 1.2.1 at WordPress leading to Google Maps API key update. 2022-06-15 not yet calculated CVE-2022-29453
CONFIRM
CONFIRM
wordpress — auto_delete_posts
 
The Auto Delete Posts WordPress plugin through 1.3.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and delete specific posts, categories and attachments at once. 2022-06-13 not yet calculated CVE-2022-1779
MISC
wordpress — change_uploaded_file_permissions
 
Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to this. 2022-06-13 not yet calculated CVE-2022-1788
MISC
wordpress — export_all_urls Authenticated (editor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Export All URLs plugin <= 4.1 at WordPress. 2022-06-15 not yet calculated CVE-2022-29452
CONFIRM
CONFIRM
wordpress — filr
 
The Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX actions, allowing them to be called by any authenticated users, such as subscriber. They are are protected with a nonce, however the nonce is leaked on the dashboard. This could allow them to upload arbitrary HTML files as well as delete all files or arbitrary ones. 2022-06-13 not yet calculated CVE-2022-1777
MISC
wordpress — google_places_reviews_plugin
 
The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site’s administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing the booby-trapped payload and taking over their account. 2022-06-13 not yet calculated CVE-2022-1772
MISC
wordpress — google_tag_manager
 
The Google Tag Manager for WordPress (GTM4WP) plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the `gtm4wp-options[scroller-contentid]` parameter found in the `~/public/frontend.php` file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.15.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. 2022-06-13 not yet calculated CVE-2022-1961
MISC
MISC
MISC
wordpress — hc_custom_wp-admin
 
The HC Custom WP-Admin URL WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, allowing them to change the login URL 2022-06-13 not yet calculated CVE-2022-1594
MISC
wordpress — image_slider Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Slider by NextCode plugin <= 1.1.2 at WordPress. 2022-06-15 not yet calculated CVE-2022-29437
CONFIRM
CONFIRM
wordpress — image_slider
 
Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allows deleting slides. 2022-06-15 not yet calculated CVE-2022-29439
CONFIRM
CONFIRM
wordpress — image_slider
 
Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress. 2022-06-15 not yet calculated CVE-2022-29438
CONFIRM
CONFIRM
wordpress — jupiterxcore_plugin Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterx_cp_load_pane_action AJAX action present in the lib/admin/control-panel/control-panel.php file calls the load_control_panel_pane function. It is possible to use this action to include any local PHP file via the slug parameter. The Jupiter theme has a nearly identical vulnerability which can be exploited via the mka_cp_load_pane_action AJAX action present in the framework/admin/control-panel/logic/functions.php file, which calls the mka_cp_load_pane_action function. 2022-06-13 not yet calculated CVE-2022-1657
MISC
wordpress — jupiterxcore_plugin
 
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the “abb_uninstall_template” (both) and “jupiterx_core_cp_uninstall_template” (JupiterX Core Only) AJAX actions 2022-06-13 not yet calculated CVE-2022-1654
MISC
wordpress — jupiterxcore_plugin
 
Vulnerable versions of the JupiterX Core (<= 2.0.6) plugin register an AJAX action jupiterx_conditional_manager which can be used to call any function in the includes/condition/class-condition-manager.php file by sending the desired function to call in the sub_action parameter. This can be used to view site configuration and logged-in users, modify post conditions, or perform a denial of service attack. 2022-06-13 not yet calculated CVE-2022-1659
MISC
wordpress — jupiterxcore_plugin
 
Vulnerable versions of the Jupiter Theme (<= 6.10.1) allow arbitrary plugin deletion by any authenticated user, including users with the subscriber role, via the abb_remove_plugin AJAX action registered in the framework/admin/control-panel/logic/plugin-management.php file. Using this functionality, any logged-in user can delete any installed plugin on the site. 2022-06-13 not yet calculated CVE-2022-1658
MISC
wordpress — latex
 
The LaTeX for WordPress plugin through 3.4.10 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack which could also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping 2022-06-13 not yet calculated CVE-2022-1780
MISC
wordpress — messages_for_wordpress
 
Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress. 2022-06-15 not yet calculated CVE-2022-29442
CONFIRM
CONFIRM
wordpress — mobile_browser_color_select
 
The Mobile browser color select plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the admin_update_data() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2022-06-13 not yet calculated CVE-2022-1969
MISC
MISC
wordpress — muneebs_custom_popup_builder
 
Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Muneeb’s Custom Popup Builder plugin <= 1.3.1 at WordPress. 2022-06-15 not yet calculated CVE-2022-28612
CONFIRM
CONFIRM
wordpress — new_user_email_set_up
 
The New User Email Set Up WordPress plugin through 0.5.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack 2022-06-13 not yet calculated CVE-2022-1790
MISC
wordpress — newsletter_plugin
 
The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER[‘REQUEST_URI’] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below. 2022-06-13 not yet calculated CVE-2022-1756
MISC
wordpress — nicdark_doo_travel_management
 
Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark d.o.o. Travel Management plugin <= 2.0 at WordPress. 2022-06-15 not yet calculated CVE-2022-27859
CONFIRM
CONFIRM
wordpress — one_click_plugin_updater
 
The One Click Plugin Updater WordPress plugin through 2.4.14 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and disable / hide the badge of the available updates and the related check. 2022-06-13 not yet calculated CVE-2022-1791
MISC
wordpress — peteraes_collaboration_e-mails_plugin
 
The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more. 2022-06-13 not yet calculated CVE-2022-1761
MISC
wordpress — photo_gallery_by_supsystic_plugin Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows changing the plugin settings. 2022-06-15 not yet calculated CVE-2021-36891
CONFIRM
CONFIRM
wordpress — posttabs
 
The postTabs WordPress plugin through 2.10.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, which also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping 2022-06-13 not yet calculated CVE-2022-1781
MISC
wordpress — private_messages_for_wordpress Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages. 2022-06-15 not yet calculated CVE-2022-29441
CONFIRM
CONFIRM
wordpress — promotion_slider
 
Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Promotion Slider plugin <= 3.3.4 at WordPress. 2022-06-15 not yet calculated CVE-2022-29440
CONFIRM
CONFIRM
wordpress — quick_subscribe
 
The Quick Subscribe WordPress plugin through 1.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and leading to Stored XSS due to the lack of sanitisation and escaping in some of them 2022-06-13 not yet calculated CVE-2022-1792
MISC
wordpress — sticky_popup_plugin
 
The Sticky Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ popup_title’ parameter in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with admin level capabilities and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This issue mostly affects sites where unfiltered_html has been disabled for administrators and on multi-site installations where unfiltered_html is disabled for administrators. 2022-06-13 not yet calculated CVE-2022-1750
MISC
wordpress — team_manager
 
Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in DynamicWebLab’s WordPress Team Manager plugin <= 1.6.9 at WordPress. 2022-06-15 not yet calculated CVE-2022-29406
CONFIRM
CONFIRM
wordpress — wp-chgfontsize_plugin
 
The WP-chgFontSize WordPress plugin through 1.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping 2022-06-13 not yet calculated CVE-2022-1764
MISC
wordpress –nicdarks_hotel_booking
 
Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark’s Hotel Booking plugin <= 3.0 at WordPress. 2022-06-15 not yet calculated CVE-2022-29443
CONFIRM
CONFIRM
wordpress– sideblog
 
The Sideblog WordPress plugin through 6.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping 2022-06-13 not yet calculated CVE-2022-1787
MISC
wordpress — copify
 
The Copify plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.0. This is due to missing nonce validation on the CopifySettings page. This makes it possible for unauthenticated attackers to update the plugins settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2022-06-13 not yet calculated CVE-2022-1900
MISC
wordpress — download_manager
 
The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and including 3.2.42. This is due to insufficient input sanitization and output escaping on the ‘frameid’ parameter found in the ~/src/Package/views/shortcode-iframe.php file. 2022-06-13 not yet calculated CVE-2022-1985
MISC
MISC
MISC
wordpress — export_any_wordpress_data_to_xml/csv
 
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability. 2022-06-13 not yet calculated CVE-2022-1800
MISC
wordpress — genki_pre-publish_reminder
 
The Genki Pre-Publish Reminder WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS as well as RCE when custom code is added via the plugin settings. 2022-06-13 not yet calculated CVE-2022-1758
MISC
wordpress — hot_linked_image_cacher_plugin
 
The Hot Linked Image Cacher WordPress plugin through 1.16 is vulnerable to CSRF. This can be used to store / cache images from external domains on the server, which could lead to legal risks (due to copyright violations or licensing rules). 2022-06-13 not yet calculated CVE-2022-1765
MISC
wordpress — iq_block_country_plugin
 
The iQ Block Country WordPress plugin through 1.2.13 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it’s block feature by spoofing the headers. 2022-06-13 not yet calculated CVE-2022-1762
MISC
wordpress — keep_backup_daily
 
The Keep Backup Daily plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘t’ parameter in versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. 2022-06-13 not yet calculated CVE-2022-1820
MISC
MISC
wordpress — mitsol_social_post_feed_plugin
 
The Mitsol Social Post Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.10 due to insufficient input sanitization and output escaping on the application id parameters. This makes it possible for authenticated (admin+) attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html is disabled. 2022-06-13 not yet calculated CVE-2022-0209
MISC
MISC
wordpress — ninja_forms_contact_form_plugin
 
Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive’s Ninja Forms Contact Form plugin <= 3.6.9 at WordPress via “label”. 2022-06-16 not yet calculated CVE-2021-36827
CONFIRM
CONFIRM
wordpress — private_files
 
The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public 2022-06-13 not yet calculated CVE-2022-1793
MISC
wordpress — rb_internal_links_plugin
 
The RB Internal Links WordPress plugin through 2.0.16 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, as well as perform Stored Cross-Site Scripting attacks due to the lack of sanitisation and escaping 2022-06-13 not yet calculated CVE-2022-1759
MISC
wordpress — rsvpmaker_plugin
 
The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passed to multiple SQL queries in the ~/rsvpmaker-email.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to, and including, 9.3.2. Please note that this is separate from CVE-2022-1453 & CVE-2022-1505. 2022-06-13 not yet calculated CVE-2022-1768
MISC
MISC
MISC
wordpress — static_page_extended_plugin
 
Due to missing checks the Static Page eXtended WordPress plugin through 2.1 is vulnerable to CSRF attacks which allows changing the plugin settings, including required user levels for specific features. This could also lead to Stored Cross-Site Scripting due to the lack of escaping in some of the settings 2022-06-13 not yet calculated CVE-2022-1763
MISC
wordpress — toolbar_to_share
 
The ToolBar to Share plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0. This is due to missing nonce validation on the plugin_toolbar_comparte page. This makes it possible for unauthenticated attackers to update the plugins settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2022-06-13 not yet calculated CVE-2022-1918
MISC
MISC
wordpress — wp_admin_style
 
The WP Admin Style WordPress plugin through 0.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed 2022-06-13 not yet calculated CVE-2022-1814
MISC
wordpress — wp_athletics
 
The WP Athletics WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting 2022-06-13 not yet calculated CVE-2022-1773
MISC
wordpress — wpmk_ajax_finder_plugin
 
The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting_page() function found in the ~/inc/config/create-plugin-config.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1. 2022-06-13 not yet calculated CVE-2022-1749
MISC
MISC
wordpress — zephyr_project_manager
 
The Zephyr Project Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘project’ parameter in versions up to, and including, 3.2.40 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. 2022-06-13 not yet calculated CVE-2022-1822
MISC
MISC
wuzhicms — wuzhicms
 
SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php 2022-06-16 not yet calculated CVE-2021-41654
MISC
xakuros — xo_slider_plugin
 
Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Xakuro’s XO Slider plugin <= 3.3.2 at WordPress. 2022-06-15 not yet calculated CVE-2022-32280
CONFIRM
CONFIRM
xfce — xfce XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server. 2022-06-13 not yet calculated CVE-2022-32278
MISC
DEBIAN
xiaomi — lamp
 
Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request. 2022-06-16 not yet calculated CVE-2022-31277
MISC
xos-shop — xos-shop_system
 
Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/categories.php 2022-06-16 not yet calculated CVE-2021-46820
MISC
xos-shop — xos-shop_system
 
Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/manufacturers.php. 2022-06-16 not yet calculated CVE-2021-37764
MISC
xpedition — designer
 
A vulnerability has been identified in Xpedition Designer (All versions < VX.2.11). The affected application assigns improper access rights to the service executable. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. 2022-06-14 not yet calculated CVE-2022-31465
MISC
xyzscripts — contact_form_manager_plugin
 
A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2022-06-16 not yet calculated CVE-2017-20054
MISC
MISC
MISC
xyzscripts — contact_form_manager_plugin
 
A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2022-06-16 not yet calculated CVE-2017-20053
MISC
MISC
MISC
yandex — browser_for_windows
 
Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process. 2022-06-15 not yet calculated CVE-2022-28225
MISC
yandex — browser_for_windows
 
Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directory with insecure permissions during Yandex Browser update process. 2022-06-15 not yet calculated CVE-2022-28226
MISC
yandex — browser
 
Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process. 2022-06-15 not yet calculated CVE-2021-25261
MISC
yugue — kkcms kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php. 2022-06-15 not yet calculated CVE-2022-32101
MISC
yuque — youdiancms YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php. 2022-06-15 not yet calculated CVE-2022-32299
MISC
yuque — youdiancms YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php. 2022-06-15 not yet calculated CVE-2022-32300
MISC
yuque — youdiancms YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php. 2022-06-15 not yet calculated CVE-2022-32301
MISC
zoom — on-premise_meeting_connector
 
Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host. 2022-06-15 not yet calculated CVE-2022-28749
MISC
zoom — opener
 
The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before version 5.10.3 are susceptible to a DLL injection attack. This vulnerability could be used to run arbitrary code on the victims host. 2022-06-15 not yet calculated CVE-2022-22788
MISC
zzcms — zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php (when the attacker has admin authority) via the id parameter. 2022-06-17 not yet calculated CVE-2019-12357
MISC
zzcms — zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendsms.php (when the attacker has dls_print authority) via a dlid cookie. 2022-06-17 not yet calculated CVE-2019-12358
MISC
zzcms — zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyan_sendmail.php (when the attacker has admin authority) via the id parameter. 2022-06-17 not yet calculated CVE-2019-12359
MISC
zzcms — zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_print.php (when the attacker has dls_print authority) via the id parameter. 2022-06-17 not yet calculated CVE-2019-12355
MISC
zzcms — zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_download.php (when the attacker has dls_download authority) via the id parameter. 2022-06-17 not yet calculated CVE-2019-12356
MISC
zzcms — zzcms
 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendmail.php (when the attacker has dls_print authority) via a dlid cookie. 2022-06-17 not yet calculated CVE-2019-12352
MISC
zzcms — zzcms
 
An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php (when the attacker has admin authority) via the id parameter. 2022-06-17 not yet calculated CVE-2019-12354
MISC
Back to top

This product is provided subject to this Notification and this Privacy & Use policy.

Please share your thoughts.

CISA recently updated an anonymous product survey;they’d welcome your feedback.