Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
814 results · page 8 of 17
Apr 2, 2023 Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of priCVE-2023-20558 · Other software · AMD · reported by psirt@amd.comHigh 8.8
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
- Product
- Ryzen™ 2000 Series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2023Coupon Zen: Does not have CSRF checkCVE-2023-1089 · WordPress plugins & themes · reported by WPScanMedium 4.3
The Coupon Zen WordPress plugin before 1.0.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack
- Product
- Coupon Zen
- Fixed in
- 1.0.6
- What to do
- Update Coupon Zen to 1.0.6 or newer.
Mar 1, 2023 Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentially leading to privilCVE-2022-27677 · Other software · AMD · reported by psirt@amd.comHigh 7.8
Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentially leading to privilege escalation and code execution by the lower privileged user.
- Product
- Ryzen™ Master
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 28, 2023In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustion.CVE-2022-20455 · Computers, phones & browsers · Google · reported by security@android.comMedium 5.5
In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242537431
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Feb 26, 2023A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5.CVE-2023-1048 · Other software · TechPowerUp · reported by VulDBMedium 5.3
A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in the library WinRing0x64.sys. The manipulation leads to improper initialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221807.
- Product
- Ryzen DRAM Calculator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 26, 2023In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion.CVE-2022-20494 · Computers, phones & browsers · Google · reported by security@android.comMedium 5.5
In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-243794204
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Jan 26, 2023In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion.CVE-2022-20492 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242704043
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Jan 26, 2023In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion.CVE-2022-20490 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703505
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Jan 26, 2023In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion.CVE-2022-20489 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703460
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Jan 26, 2023In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion.CVE-2022-20456 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703780
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Jan 19, 2023ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection.CVE-2022-47745 · Other software · Easycorp · reported by MITREHigh 8.8
ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice.
- Product
- Zentao
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 11, 2023A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that CVE-2021-46795 · Other software · AMD · reported by psirt@amd.comMedium 4.7
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.
- Product
- Ryzen 5000 Series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 11, 2023Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory tablCVE-2021-26346 · Other software · AMD · reported by psirt@amd.comMedium 5.5
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
- Product
- Ryzen 5000 Series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 11, 2023Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (SCVE-2021-26316 · Other software · AMD · reported by psirt@amd.comHigh 7.8
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
- Product
- Ryzen 5000 Series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 7, 2023A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38.CVE-2020-36646 · Other software · MediaArea · reported by VulDBLow 3.5
A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of the file Source/ZenLib/Ztring.cpp. The manipulation of the argument Value leads to unchecked return value to null pointer dereference. Upgrading to version 0.4.39 is able to address this issue. The identifier of the patch is 6475fcccd37c9cf17e0cfe263b5fe0e2e47a8408. It is recommended to upgrade the affected component. The identifier VDB-217629 was assigned to this vulnerability.
- Product
- ZenLib
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 1, 2023A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4.CVE-2018-25063 · Other software · Zenoss · reported by VulDBLow 3.5
A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.3.5 is able to address this issue. The identifier of the patch is f462285a0a2d7e1a9255b0820240b94a43b00a44. It is recommended to upgrade the affected component. The identifier VDB-217153 was assigned to this vulnerability.
- Product
- Dashboard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2022DNSSEC validation is not performed correctly.CVE-2022-3347 · Other software · github.com/peterzen/goresolver · reported by security@golang.orgHigh 7.5
DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. Root DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and delegation chain.
- Product
- github.com/peterzen/goresolver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2022DNSSEC validation is not performed correctly.CVE-2022-3346 · Other software · github.com/peterzen/goresolver · reported by security@golang.orgMedium 6.5
DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. The owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain.
- Product
- github.com/peterzen/goresolver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 23, 2022A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions.CVE-2022-38757 · Other software · Micro Focus · reported by security@opentext.comHigh 7.2
A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but which are outside the scope of the administrator. This vulnerability does not result in the administrators gaining additional rights on the managed devices, either in the scope or outside the scope of the administrator.
- Product
- ZENworks Configuration Management (ZCM)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkmviewer.saas.microfocus.comkmviewer.saas.microfocus.com
Dec 21, 2022Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administrative privilege to inCVE-2022-44449 · Other software · Zenphoto · reported by vultures@jpcert.or.jpMedium 4.8
Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
- Product
- Zenphoto
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2022A vulnerability was found in morontt zend-blog-number-2.CVE-2022-4397 · Other software · morontt · reported by VulDBMedium 4.3
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is 36b2d4abe20a6245e4f8df7a4b14e130b24d429d. It is recommended to apply a patch to fix this issue. VDB-215250 is the identifier assigned to this vulnerability.
- Product
- zend-blog-number-2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 30, 2022Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).CVE-2022-44136 · Other software · Tribalsystems · reported by MITRECritical 9.8
Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).
- Product
- Zenario
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcom0t.github.iocom0t.github.io
Nov 30, 2022A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595.CVE-2022-4231 · Other software · Tribal Systems · reported by VulDBMedium 4.2
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595. This issue affects some unknown processing of the component Remember Me Handler. The manipulation leads to session fixiation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214589 was assigned to this vulnerability.
- Product
- Zenario CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 16, 2022Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.CVE-2022-44073 · Other software · Tribalsystems · reported by MITREMedium 5.4
Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.
- Product
- Zenario
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 16, 2022Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.CVE-2022-44071 · Other software · Tribalsystems · reported by MITREMedium 5.4
Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.
- Product
- Zenario
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 16, 2022Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.CVE-2022-44070 · Other software · Tribalsystems · reported by MITREMedium 5.4
Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.
- Product
- Zenario
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 16, 2022Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.CVE-2022-44069 · Other software · Tribalsystems · reported by MITREMedium 5.4
Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.
- Product
- Zenario
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 2, 2022A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS.CVE-2020-36608 · Other software · Tribal Systems · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file admin_organizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is dfd0afacb26c3682a847bea7b49ea440b63f3baa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-212816.
- Product
- Zenario CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion.CVE-2022-20425 · Computers, phones & browsers · Google · reported by security@android.comMedium 5.5
In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-235823407
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Sep 30, 2022If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch UpdaCVE-2022-40756 · Other software · Actian · reported by MITREHigh 8.8
If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch Update 5 for Zen 14 SP2 (v14.21.022), it can allow an attacker (with file read/write access) to remove specific security files in order to reset the master password and gain access to the database.
- Product
- Psql
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordactian.my.salesforce.comactian.com
Sep 28, 2022An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE).CVE-2022-40279 · Computers, phones & browsers · Samsung · reported by MITREHigh 7.5
An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). l2_packet_receive_timeout in wpa_supplicant/src/l2_packet/l2_packet_pcap.c has a missing check on the return value of pcap_dispatch, leading to a denial of service (malfunction).
- Product
- Tizenrt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 28, 2022An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE).CVE-2022-40278 · Computers, phones & browsers · Samsung · reported by MITREHigh 7.5
An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_free after sqlite3_exec, leading to a denial of service.
- Product
- Tizenrt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022Zentao Demo15 is vulnerable to Directory Traversal.CVE-2022-37700 · Other software · Easycorp · reported by MITREHigh 7.5
Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: URL : view-source:https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig.
- Product
- Zentao
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddemo15.zentao.pmmedium.com
Sep 9, 2022Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen's wp-forecast plugin <= 7.5 at WordPress.CVE-2022-35725 · WordPress plugins & themes · reported by PatchstackMedium 4.8
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen's wp-forecast plugin <= 7.5 at WordPress.
- Affected
- up to 7.5
- What to do
- Affects up to 7.5. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.comwordpress.org
Sep 8, 2022An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE).CVE-2022-40281 · Computers, phones & browsers · Samsung · reported by MITREHigh 7.5
An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). cyassl_connect_step2 in curl/vtls/cyassl.c has a missing X509_free after SSL_get_peer_certificate, leading to information disclosure.
- Product
- Tizenrt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 2022An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE).CVE-2022-40280 · Computers, phones & browsers · Samsung · reported by MITREHigh 7.5
An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_close after sqlite3_open_v2, leading to a denial of service.
- Product
- Tizenrt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 24, 2022Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data poCVE-2022-34838 · Other software · ABB · reported by cybersecurity@ch.abb.comHigh 8.1
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.
- Product
- ABB Zenon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsearch.abb.comsearch.abb.com
Aug 24, 2022Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add more network cliCVE-2022-34837 · Other software · ABB · reported by cybersecurity@ch.abb.comMedium 6.2
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add more network clients that may monitor various activities of the Zenon.
- Product
- ABB Zenon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsearch.abb.comsearch.abb.com
Aug 24, 2022Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., floCVE-2022-34836 · Other software · ABB · reported by cybersecurity@ch.abb.comMedium 5.9
Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start and stop of various activity and the last error code etc.
- Product
- ABB Zenon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsearch.abb.comsearch.abb.com
Aug 22, 2022The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated.CVE-2022-34919 · Other software · Zengenti · reported by MITRECritical 9.8
The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands.
- Product
- Contensis
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comzengenti.com
Aug 10, 2022Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that useCVE-2021-46778 · Other software · AMD · reported by psirt@amd.comMedium 5.6
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.
- Product
- AMD Processors
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 2, 2022HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation.CVE-2022-35222 · Other software · HINET · reported by twcert@cert.org.twMedium 6.8
HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
- Product
- HiCOS Citizen verification component - Stack Buffer Overflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Jul 19, 2022HiCOS’ client-side citizen certificate component has a double free vulnerability.CVE-2022-32962 · Other software · HINET · reported by twcert@cert.org.twMedium 6.8
HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.
- Product
- HiCOS’ client-side citizen digital certificate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Jul 19, 2022HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter lengCVE-2022-32961 · Other software · HINET · reported by twcert@cert.org.twMedium 6.8
HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.
- Product
- HiCOS’ client-side citizen digital certificate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Jul 19, 2022HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter lengCVE-2022-32960 · Other software · HINET · reported by twcert@cert.org.twMedium 6.8
HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.
- Product
- HiCOS’ client-side citizen digital certificate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Jul 19, 2022HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter lengCVE-2022-32959 · Other software · HINET · reported by twcert@cert.org.twMedium 6.8
HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.
- Product
- HiCOS’ client-side citizen digital certificate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Jul 14, 2022A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to outCVE-2021-26384 · Other software · AMD · reported by psirt@amd.comHigh 7.8
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.
- Product
- Ryzen™ Series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 14, 2022An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signiCVE-2021-26382 · Other software · AMD · reported by psirt@amd.comMedium 4.4
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
- Product
- Ryzen™ Series
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2022ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS).CVE-2021-43702 · Network & remote access · Asus · reported by MITRECritical 9
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
- Product
- Zenwifi Xd4s Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 17, 2022ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).CVE-2021-45026 · Other software · Rocketsoftware · reported by MITREMedium 6.1
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).
- Product
- Ags-zena
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.rocketsoftware.comdocs.rocketsoftware.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.