CVE Vulnerability Catalog

An integer overflow in the source-bounds check in Memory::init() in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module where a 32-bit unsigned addition wraps around and bypasses the bounds check.

A flaw was found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected component is Order Endpoint, in the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java. Manipulation of hospitalName/officesName/doctorName arguments causes cross-site scripting. The attack can be initiated remotely, and the exploit has been published. The project has not responded yet.

A security flaw was discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected function is modifyPassWord in the file ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java (Password Recovery component). Manipulation results in unverified password change. Remote exploitation is possible, and the exploit has been released publicly. The project has not responded yet.

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0, in the file /pages/sup_transac.php. Manipulation of the companyname argument results in SQL injection. The attack can be initiated remotely, and the exploit is now public.

A security vulnerability was detected in FastAdmin up to 1.2.0.20210401_beta. The affected function is register/login in the file application/index/controller/User.php (User Controller component). Manipulation of the url argument leads to cross-site scripting. The attack may be performed remotely, and the exploit has been publicly disclosed. Upgrading to version 1.2.1.20210731_beta addresses this issue.

A weakness was identified in liufee FeehiCMS up to 2.1.1. The affected file is environments/prod/backend/config/main-local.php (Cookie Validation component). Manipulation of the cookieValidationKey argument causes use of a hard-coded cryptographic key. The attack can be carried out remotely, and the exploit has been made public. The project has not responded yet.

A security flaw was discovered in liufee FeehiCMS up to 2.1.1. The affected function is catchImage in the file backend/widgets/ueditor/Uploader.php (UEditor component). Manipulation of the source[] argument results in server-side request forgery. The attack can be executed remotely, and the exploit has been released publicly. The project has not responded yet.

A vulnerability was identified in FeehiCMS up to version 2.1.1 in the UEditor Widget component, in the UeditorAction::init function of the file backend/widgets/ueditor/UeditorAction.php. The manipulation leads to unrestricted file upload. The attack can be performed remotely, and the exploit is publicly available.

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation.

In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.

In the GPU module, there is a possible system crash due to use-after-free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed.

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed.

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.

In SurfaceFlinger, there is a possible memory corruption due to use-after-free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.

In Power HAL, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.

In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.

In Audio HAL, there is a possible escalation of privilege due to use-after-free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.