CVE-2021-3748

CVE-2021-3748 affects the QEMU virtio-net device. A use-after-free can occur when the descriptor’s address lies in the non-direct-access region and num_buffers is set after the virtqueue element is unmapped, enabling a guest to crash QEMU or potentially execute code on the host with QEMU privileg...

CVE-2021-27428 GE UR family Unrestricted Upload of File with Dangerous Type

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without...

CVE-2022-0858

McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 contains a cross‑site scripting (XSS) vulnerability that could allow a remote attacker to obtain an administrator’s session by persuading the user to click a crafted link, with limited ability to alter information in the affecte...

CVE-2022-0886

...

CVE-2022-0886

CVE-2022-0886 is a reserved/duplicate of CVE-2022-27666. Connected docs confirm CVE-2022-27666 affects the Linux kernel IPsec ESP transformation (net/ipv4/esp4.c and net/ipv6/esp6.c), enabling a local attacker with normal privileges to potentially escalate privileges via a heap buffer overflow. N...

Path Traversal in Studio-42 elFinder through 2.1.60

connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths...

Online Project Time Management v1.0 SQL injection Vulnerability

Title: Online Project Time Management v1.0 SQLi Author: nu11secur1ty Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15136/online-project-time-management-system-phpoop-free-source-code.html Reference:...

Improper access control

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by incorrect access control. Lack of access control on the web manger pages allows any user to view and modify information...

CVE-2022-25437

CVE-2022-25437 affects Tenda AC9, specifically version 15.03.2.21. The vulnerability is a stack overflow in the SetVirtualServerCfg function triggered by the list parameter. Public sources describe potential arbitrary code execution as a consequence of the overflow. Documented remediation status ...

CVE-2022-25428

CVE-2022-25428 affects Tenda AC9, version 15.03.2.21, with a stack overflow in the saveparentcontrolinfo function triggered by the deviceId parameter. Multiple sources describe it as allowing arbitrary command execution via this flaw. The NVD data indicates a high/critical impact with network acc...

Design/Logic Flaw

A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts...

Design/Logic Flaw

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4. A malicious website may be able to access information about the user and their devices...

CVE-2020-25180

Summary (CVE-2020-25180) Rockwell Automation ISaGRAF Runtime 4.x–5.x uses a fixed-key TEA-based encryption for passwords needed to run privileged commands. A remote, unauthenticated attacker can submit a self-encrypted password to ISaGRAF 5 Runtime, potentially causing information disclosure on t...

CVE-2022-22644

CVE-2022-22644 describes a privacy issue in macOS Monterey related to how contact card data was handled. The connected documents confirm the vulnerability affects how information about a user’s contacts could be accessed by a malicious application, and Apple addressed it by implementing improved ...

CVE-2021-22571

The CVE-2021-22571 issue affects Google SA360 WebQuery to BigQuery Exporter (SA360-webquery-bigquery). A local attacker could read files from other users’ SA360 reports stored in /tmp during staging before loading into BigQuery. Root cause centers on improper isolation of staged report files in /...

CVE-2021-46107

The CVE-2021-46107 entry concerns Ligeo Archives Ligeo Basics. Connected sources confirm a Server-Side Request Forgery (SSRF) vulnerability in the Ligeo Basics download feature, allowing an attacker to read documents. Details across sources consistently identify the affected product (Ligeo Basics...

CVE-2022-25516

CVE-2022-25516 concerns the heap-buffer-overflow in the stb_truetype.h 1.26 library, triggered by the function stbtt__find_table . Multiple connected sources corroborate a heap-buffer-overflow in stb_truetype.h, with the core issue attributed to the table-finding routine and accompanied by a note...

CVE-2022-25514

The CVE-2022-25514 entry concerns stb_truetype.h v1.26, where a heap-buffer-overflow is triggered by ttUSHORT() in stb_truetype.h. The Red Hat, NVD, and related feeds confirm the affected component and the root cause as a heap-buffer-overflow in ttUSHORT(); the attack surface is tied to the stb_t...

CVE-2021-39715

The CVE refers to an information disclosure in the Android kernel: in __show_regs of process.c, log information disclosure could leak kernel memory/addresses, enabling local information leakage with SYSTEM privileges. Affected software: Android kernel components; vulnerable item: the show_regs pa...

CVE-2021-45851

A Server-Side Request Forgery SSRF attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server...