Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
16,468 results · page 128 of 330
Dec 30, 2024Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks.CVE-2024-46542 · Other software · Veritas · reported by MITREMedium 6.5
Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks.
- Product
- Data Insight
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 30, 2024The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability.CVE-2024-22063 · Other software · ZTE · reported by psirt@zte.com.cnHigh 7.6
The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices.
- Product
- ZENIC ONE R58
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024Some Huawei home music system products have a path traversal vulnerability.CVE-2023-7263 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.(Vulnerability ID:HWPSIRT-2023-53450) This vulnerability has been assigned a (CVE)ID:CVE-2023-7263
- Product
- HarmonyOS AILife Solution 8.0
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024Huawei HiLink AI Life product has an identity authentication bypass vulnerability.CVE-2022-48470 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291) This vulnerability has been assigned a (CVE)ID:CVE-2022-48470
- Product
- HarmonyOS AILife Solution 6.0
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products.CVE-2020-1824 · Other software · Huawei · reported by psirt@huawei.comLow 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
- Product
- IPS Module
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products.CVE-2020-1823 · Other software · Huawei · reported by psirt@huawei.comLow 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
- Product
- IPS Module
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products.CVE-2020-1822 · Other software · Huawei · reported by psirt@huawei.comLow 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
- Product
- IPS Module
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products.CVE-2020-1821 · Other software · Huawei · reported by psirt@huawei.comLow 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
- Product
- IPS Module
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products.CVE-2020-1820 · Other software · Huawei · reported by psirt@huawei.comLow 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
- Product
- IPS Module
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2024-46973 · Other software · Imagination Technologies · reported by 367425dc-4d06-4041-9650-c2dc6aaa27ceHigh 7.8
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.
- Product
- Graphics DDK
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2024-46972 · Other software · Imagination Technologies · reported by 367425dc-4d06-4041-9650-c2dc6aaa27ceHigh 7.8
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.
- Product
- Graphics DDK
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix when get product name maybe null pointer Due to incorrect dev->product repCVE-2024-56629 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix when get product name maybe null pointer Due to incorrect dev->product reporting by certain devices, null pointer dereferences occur when dev->product is empty, leading to potential system crashes. This issue was found on EXCELSIOR DL37-D05 device with Loongson-LS3A6000-7A2000-DL37 motherboard. Kernel logs: [ 56.470885] usb 4-3: new full-speed USB device number 4 using ohci-pci [ 56.671638] usb 4-3: string descriptor 0 read error: -22 [ 56.671644] usb 4-3: New USB device found, idVendor=056a, idProduct=0374, bcdDevice= 1.07 [ 56.671647] usb 4-3: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.678839] hid-generic 0003:056A:0374.0004: hiddev0,hidraw3: USB HID v1.10 Device [HID 056a:0374] on usb-0000:00:05.0-3/input0 [ 56.697719] CPU 2 Unable to handle kernel paging request at virtual address 0000000000000000, era == 90000000066e35c8, ra == ffff800004f98a80 [ 56.697732] Oops[#1]: [ 56.697734] CPU: 2 PID: 2742 Comm: (udev-worker) Tainted: G OE 6.6.0-loong64-desktop #25.00.2000.015 [ 56.697737] Hardware name: Inspur CE520L2/C09901N000000000, BIOS 2.09.00
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Dec 27, 2024In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures SyzkallerCVE-2024-53190 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures Syzkaller reported a hung task with uevent_show() on stack trace. That specific issue was addressed by another commit [0], but even with that fix applied (for example, running v6.12-rc5) we face another type of hung task that comes from the same reproducer [1]. By investigating that, we could narrow it to the following path: (a) Syzkaller emulates a Realtek USB WiFi adapter using raw-gadget and dummy_hcd infrastructure. (b) During the probe of rtl8192cu, the driver ends-up performing an efuse read procedure (which is related to EEPROM load IIUC), and here lies the issue: the function read_efuse() calls read_efuse_byte() many times, as loop iterations depending on the efuse size (in our example, 512 in total). This procedure for reading efuse bytes relies in a loop that performs an I/O read up to *10k* times in case of failures. We measured the time of the loop inside read_efuse_byte() alone, and in this reproducer (which involves the dummy_hcd emulation layer), it takes 15 seconds each. As a consequence, we have the driver stuck i
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Dec 27, 2024In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reducCVE-2024-53164 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67High 7.8
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen _before_ a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become empty.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Dec 27, 2024There is an improper interface design vulnerability in Huawei product.CVE-2020-9236 · Other software · Huawei · reported by psirt@huawei.comHigh 8.8
There is an improper interface design vulnerability in Huawei product. A module interface of the impated product does not deal with some operations properly. Attackers can exploit this vulnerability to perform malicious operatation to compromise module service. (Vulnerability ID: HWPSIRT-2020-05010) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9236.
- Product
- FusionCompute
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024There is a privilege escalation vulnerability in Huawei FusionCompute product.CVE-2020-9222 · Other software · Huawei · reported by psirt@huawei.comHigh 7
There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on specific files that need to be deserialized, local attackers can exploit this vulnerability to elevate permissions. (Vulnerability ID: HWPSIRT-2020-05241) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9222.
- Product
- FusionCompute
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024There is an insufficient integrity vulnerability in Huawei products.CVE-2020-9210 · Other software · Huawei · reported by psirt@huawei.comMedium 6.8
There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scenario. Attackers can exploit the vulnerability by physically install malware. This could compromise normal service of the affected device. (Vulnerability ID: HWPSIRT-2020-00145) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9210.
- Product
- Myna
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024There is a buffer error vulnerability in some Huawei product.CVE-2020-9086 · Other software · Huawei · reported by psirt@huawei.comMedium 4.3
There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086.
- Product
- HUAWEI 4G Router B612
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024There is a NULL pointer dereference vulnerability in some Huawei products.CVE-2020-9085 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085.
- Product
- HUAWEI 4G Router B612
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024There is an improper privilege management vulnerability in Huawei smart phone product.CVE-2020-9080 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.
- Product
- HUAWEI Mate 20 Pro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products.CVE-2020-1819 · Other software · Huawei · reported by psirt@huawei.comLow 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
- Product
- IPS Module
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products.CVE-2020-1818 · Other software · Huawei · reported by psirt@huawei.comLow 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
- Product
- IPS Module
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2024An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products.CVE-2024-56520 · Other software · tecnick · reported by MITREHigh 7.3
An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed.
- Product
- tcpdf
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-47150 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Low 3.3
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.CVE-2024-47149 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Low 3.3
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-8994 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Medium 6.2
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-8993 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Medium 6.2
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-8992 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Medium 4
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.CVE-2024-47157 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Low 2.9
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-47155 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Medium 5.5
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-47154 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Medium 5.5
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-47153 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Medium 6.2
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.CVE-2024-47148 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Medium 4
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-47156 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Low 3.3
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- Product
- MagicOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Some Honor products are affected by file writing vulnerability, successful exploitation could cause code executionCVE-2024-47151 · Other software · Honor · reported by 3836d913-7555-4dd0-a509-f5667fdf5fe4Medium 6.3
Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution
- Product
- Magic OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 24, 2024Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).CVE-2019-2483 · Other software · Oracle Corporation · reported by secalert_us@oracle.comHigh 8.2
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).
- Product
- Oracle iStore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 23, 2024In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers tCVE-2024-40896 · Other software · libxml2 · reported by MITRECritical 9.1
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
- Product
- libxml2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgitlab.gnome.orggitlab.gnome.org
Dec 23, 2024ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine.CVE-2024-12902 · Other software · Global Wisdom Software · reported by twcert@cert.org.twHigh 8.4
ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default credentials.
- Product
- ANCHOR
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Dec 22, 2024A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9.CVE-2024-12893 · Other software · Portabilis · reported by VulDBMedium 5.1
A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. Affected by this issue is some unknown functionality of the file /usuarios/tipos/2 of the component Tipo de Usuário Page. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- i-Educar
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 21, 2024eCommerce Product Catalog Plugin for: Cross-Site Request ForgeryCVE-2024-12771 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.43. This is due to missing or incorrect nonce validation on the 'customer_panel_password_reset' function. This makes it possible for unauthenticated attackers to reset the password of any administrator or customer account via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
- Product
- eCommerce Product Catalog Plugin for
- Affected
- up to 3.3.43
- What to do
- Affects up to 3.3.43. Update eCommerce Product Catalog Plugin for to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Dec 21, 2024Custom Product Tabs For WooCommerce: PHP Object InjectionCVE-2024-12721 · WordPress plugins & themes · reported by WordfenceHigh 7.2
The Custom Product Tabs For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.4 via deserialization of untrusted input from the 'wb_custom_tabs' parameter. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
- Product
- Custom Product Tabs For WooCommerce
- Affected
- up to 1.2.4
- What to do
- Affects up to 1.2.4. Update Custom Product Tabs For WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Dec 20, 2024Path Traversal vulnerability in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arCVE-2024-12014 · Other software · Lleidanet PKI · reported by cve-coordination@incibe.esLow 2
Path Traversal vulnerability in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers.
- Product
- eSigna
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 19, 2024There is an improper input verification vulnerability in Huawei printer product.CVE-2022-32204 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause service abnormal. (Vulnerability ID: HWPSIRT-2022-87185) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-32204.
- Product
- CV81-WDM FW
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 19, 2024There is a command injection vulnerability in Huawei terminal printer product.CVE-2022-32203 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is a command injection vulnerability in Huawei terminal printer product. Successful exploitation could result in the highest privileges of the printer. (Vulnerability ID: HWPSIRT-2022-51773) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-32203.
- Product
- CV81-WDM FW
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 19, 2024There is an insufficient input verification vulnerability in Huawei product.CVE-2022-32144 · Other software · Huawei · reported by psirt@huawei.comHigh 8.6
There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to service abnormal. (Vulnerability ID: HWPSIRT-2022-76192) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-32144.
- Product
- CV81-WDM FW
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2024A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious CVE-2024-55239 · Other software · Portabilis · reported by MITREMedium 5.4
A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulo_documento' parameter.
- Product
- I-educar
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2024IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.CVE-2024-45082 · Other software · IBM · reported by psirt@us.ibm.comMedium 6.8
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted.
- Product
- Cognos Analytics
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 17, 2024Default credentials are used in the above listed BD Diagnostic Solutions products.CVE-2024-10476 · Other software · Becton Dickinson & Co · reported by cybersecurity@bd.comHigh 8
Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information (PHI) and personally identifiable information (PII). Exploitation of this vulnerability may allow an attacker to shut down or otherwise impact the availability of the system. Note: BD Synapsys™ Informatics Solution is only in scope of this vulnerability when installed on a NUC server. BD Synapsys™ Informatics Solution installed on a customer-provided virtual machine or on the BD Kiestra™ SCU hardware is not in scope.
- Product
- BD BACTEC™ Blood Culture System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 16, 2024Dreamfox Media Payment gateway per Product for Woocommerce: Missing AuthorizationCVE-2024-55996 · WordPress plugins & themes · reported by PatchstackMedium 6.1
Missing Authorization vulnerability in dreamfox Dreamfox Media Payment gateway per Product for Woocommerce woocommerce-product-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dreamfox Media Payment gateway per Product for Woocommerce: from n/a through <= 3.5.6.
- Product
- Dreamfox Media Payment gateway per Product for Woocommerce
- Affected
- up to 3.5.6
- What to do
- Affects up to 3.5.6. Update Dreamfox Media Payment gateway per Product for Woocommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Dec 16, 2024Amazon Product Price: Cross-Site Request Forgery (CSRF)CVE-2024-54439 · WordPress plugins & themes · reported by PatchstackHigh 7.1
Cross-Site Request Forgery (CSRF) vulnerability in Alok Tiwari Amazon Product Price amazon-product-price allows Stored XSS.This issue affects Amazon Product Price: from n/a through <= 1.1.
- Product
- Amazon Product Price
- Affected
- up to 1.1
- What to do
- Affects up to 1.1. Update Amazon Product Price to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.