8903 matches found
CVE-2022-33727
A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack...
CVE-2022-36296 WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability
Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin = 0.2.27 at WordPress allows unauthenticated post update/create/delete...
CVE-2022-36296: Improper Authentication
Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin = 0.2.27 at WordPress allows unauthenticated post update/create/delete...
PT-2022-18025 · Sourcecodester · Sourcecodester Garage Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Garage Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Garage Management System, allowing for SQL injection through the manipulation of the userName/uemail...
Samsung Mobile Devices security vulnerabilities
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung. A security vulnerability exists in the SAMSUNG Mobile devices SecDevicePickerDialog module, versions prior to SMR Aug-2022 Release 1, which is caused due to...
Samsung Mobile Devices security vulnerabilities
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung. A security vulnerability in the SAMSUNG Mobile devices BluetoothScanDialog module prior to SMR Aug-2022 Release 1, which originates from a vulnerable code in...
WS-2022-0256
Due to Improper Access Control, bookwyrm is vulnerable to Insecure direct object references IDOR. This allows an attacker to create a group on other users' accounts, and affect the logic of the application. Version 0.4.5 contains a patch for this issue...
@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2022-35924 via next-auth (3.1.0)
next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2022-35924 Source advisory: OSV:GHSA-XV97-C62V-4587...
Path Traversal
org.dspace:dspace-jspui is vulnerable to path traversal. The vulnerability exists due to the resumable upload implementations in SubmissionController and FileUploadRequest components, which allows an attacker to modify request parameters during submission and create files or directories anywhere ...
PT-2022-33176
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.324 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2022-32425
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2022-33052
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.253 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2022-33122
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.289 Description A potential refcount leak was discovered in the tipc sk create function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...
PT-2022-32645
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2022-32954
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2022-32700
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.53 Description The issue is related to the movement of bc link creation back to tipc node create. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-32822
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description A potential refcount leak issue exists in the tipc sk create function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
CVE-2022-2578
A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /phpaction/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit...
mariadb: server crash in create_tmp_table::finalize
A flaw was found in MariaDB. The component, Createtmptable::finalize, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...