CVE-2023-26455

RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers with local or adjacent network access could abuse the RMI service to modify calendar items using RMI. RMI access is restricted to localhost by default. The interface has been updated to require...

Open-Xchange App Suite License Issues Vulnerability

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite that stems from a call to ChronosRMIService:setEventOrganizer where RMI does not require authentication...

analytics-zoo (>=0.11.0, <=0.12.0b2022082301), bigdl (>=0.13.0.dev1, <=2.5.0b20240324) +12 more potentially affected by CVE-2022-33891 via pyspark (2.4.6)

pyspark PYPI version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.11.0, =0.13.0.dev1, =0.14.0b20211027, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =0.3.0, =0.2.1, =0.4.1 Source cves:...

CVE-2021-24862

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rmchronosajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue...

CVE-2021-24862

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rmchronosajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue...

PT-2022-9483

Name of the Vulnerable Software and Affected Versions RegistrationMagic WordPress plugin versions prior to 5.0.1.6 Description The issue arises from the plugin not escaping user input in its rm chronos ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which...

CVE-2017-15403

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

CVE-2017-15403

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

CVE-2017-15403

CVE-2017-15403 affects Chrome OS crosh networking (network_diag) due to insufficient data validation, enabling local command injection under chronos privileges via a crafted HTML page. Affected platforms include Chrome OS before 61.0.3163.113. Google Chrome OS update 61.0.3163.113 (stable channel...

CVE-2017-15403

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

Chrome OS /sbin/crash_reporter Symlink Traversal Vulnerability

Exploit for windows platform in category dos / poc Chrome OS: symlink traversal issue in /sbin/crashreporter Tested on: Version 69.0.3473.0 Official Build dev 64-bit CreateDirectoryWithSettings in https://chromium.googlesource.com/chromiumos/platform2/+/master/crash-reporter/crashcollector.cc107 ...

Chrome OS /sbin/crash_reporter Symlink Traversal

Chrome OS: symlink traversal issue in /sbin/crashreporter Tested on: Version 69.0.3473.0 Official Build dev 64-bit CreateDirectoryWithSettings in https://chromium.googlesource.com/chromiumos/platform2/+/master/crash-reporter/crashcollector.cc107 is executed by /sbin/crashreporter every time a...

Chronos Time Master Watch Face - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Chronos Time Master Watch Face published at the 'play' market has multiple vulnerabilities...