CVE-2022-23105

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations...

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogramming-based chips from the Demon model in 1905 allows a hacker to trigger a service failure.

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogrammed software chips in 1905 is related to the lack of authentication. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogramming-based chips from the Demon model in 1905 allows a hacker to trigger a service failure.

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogrammed software chips in 1905 is related to the lack of authentication. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Lack of slippage checks during swap

Handle ye0lde Vulnerability details Impact Since the code does not use a minimum return value for swaps it is susceptible to sandwich attacks. More information here: Proof of Concept Here the code Calls Curve to convert the existing underlying balance into UST: / Calls Curve to convert the existi...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Arbitrary file read via group import feature Stored XSS in notes Lack of state parameter on GitHub import project OAuth Vulnerability related fields are available to unauthorized users on GraphQL API Deleting packages may cause table locks IP restriction bypass via GraphQL...

Privilege Escalation

containerd is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of node location allowing an attacker to bind mount via hostPath...

Wekan Cross-Site Scripting Vulnerability

Wekan is a highly finished open source kanban tool. wekan suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in WEB applications. An attacker could exploit the vulnerability to execute malicious javascript code...

Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...

PT-2022-9070

Name of the Vulnerable Software and Affected Versions Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets Linear WADWAZ-1 version 3.43 Linear WAPIRZ-1 version 3.43 Description The issue affects Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets, which do not...

Siemens JT2Go CGM File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of email attachments. The issue results from the lack of proper validation of...

PT-2022-12179

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description The issue is related to a lack of boundary check in the parseSWF DEFINELOSSLESS2 function, located in util/parser.c, which could lead to denial-of-service attacks via a crafted SWF file. Recommendations For...

Buffer Overflow

Ghostscript is vulnerable to buffer overflow. The vulnerability exists due to a lack of sanitization in sampleddatafinish called from sampleddatacontinue and interp in the heap...

CVE-2021-30274: Integer Overflow or Wraparound

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

CVE-2021-30268: Buffer Copy without Checking Size of Input

Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

PT-2022-9954

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue is related to a possible heap memory corruption due to lack of input validation when sending the HWTC IQ Capture command. This affects various Qualcomm Snapdragon...

PT-2022-11825

Name of the Vulnerable Software and Affected Versions Datalogic DXU service on DL-Axist devices affected versions not specified Description The issue concerns the lack of authentication requirements for configuration changes or disclosure of configuration settings in the Datalogic DXU service. Th...

PT-2021-13807

Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue is related to a lack of proper authentication in the bittorrent functionality. If this functionality is enabled, it allows anyone to visit and modify settings and files via the...

PT-2021-27310

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: The issue concerns a lack of sanity check on the last xattr entry in the f2fs setxattr function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2021-7480

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3150A-LTE versions affected versions not specified Moxa OnCell G3470A-LTE versions affected versions not specified Moxa WDR-3124A versions affected versions not specified Moxa AWK-3131A versions affected versions not specified Mox...