Low-severity CVEs (page 84)
Page 84 of 100 — low-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-33693 | Low | 2.0 | 2022-07-12 | Exposure of Sensitive Information in CID Manager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log. |
CVE-2022-33688 | Low | 3.3 | 2022-07-12 | Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permis… |
CVE-2022-33687 | Low | 3.3 | 2022-07-12 | Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log. |
CVE-2022-33686 | Low | 2.3 | 2022-07-12 | Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log. |
CVE-2022-30753 | Low | 3.3 | 2022-07-12 | Improper use of a unique device ID in unprotected SecSoterService prior to SMR Jul-2022 Release 1 allows local attackers to get the device ID without permissio… |
CVE-2022-30752 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap cli… |
CVE-2022-30751 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap cli… |
CVE-2022-30750 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in updateLastConnectedClientInfo function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wi… |
CVE-2022-2047 | Low | 2.7 | 2022-07-07 | In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme UR… |
CVE-2022-23744 | Low | 2.3 | 2022-07-07 | Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administr… |
CVE-2022-35230 | Low | 3.7 | 2022-07-06 | An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed on… |
CVE-2022-35229 | Low | 3.7 | 2022-07-06 | An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed… |
CVE-2021-23163 | Low | 3.1 | 2022-07-06 | JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints. This issue affects: JFrog JF… |
CVE-2022-0167 | Low | 3.1 | 2022-07-01 | An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions s… |
CVE-2022-2270 | Low | 3.5 | 2022-07-01 | An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions st… |
CVE-2022-1999 | Low | 3.1 | 2022-07-01 | An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. Under certain c… |
CVE-2022-1981 | Low | 2.7 | 2022-07-01 | An issue has been discovered in GitLab EE affecting all versions starting from 12.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. In GitLab… |
CVE-2022-2281 | Low | 2.6 | 2022-07-01 | An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows… |
CVE-2022-2227 | Low | 3.1 | 2022-07-01 | Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows a… |
CVE-2022-34894 | Low | 3.5 | 2022-07-01 | In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services |
CVE-2017-20122 | Low | 3.5 | 2022-06-30 | A vulnerability classified as problematic was found in Bitrix Site Manager 12.06.2015. Affected by this vulnerability is an unknown functionality of the compon… |
CVE-2017-20119 | Low | 3.5 | 2022-06-29 | A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The man… |
CVE-2017-20118 | Low | 3.5 | 2022-06-29 | A vulnerability was found in TrueConf Server 4.3.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/c… |
CVE-2017-20117 | Low | 3.5 | 2022-06-29 | A vulnerability was found in TrueConf Server 4.3.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2017-20116 | Low | 3.5 | 2022-06-29 | A vulnerability was found in TrueConf Server 4.3.7. It has been classified as problematic. Affected is an unknown function of the file /admin/group/list/. The… |
CVE-2017-20115 | Low | 3.5 | 2022-06-29 | A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown processing of the file /admin/conferences/lis… |
CVE-2017-20114 | Low | 3.5 | 2022-06-29 | A vulnerability has been found in TrueConf Server 4.3.7 and classified as problematic. This vulnerability affects unknown code of the file /admin/conferences/g… |
CVE-2017-20113 | Low | 3.5 | 2022-06-29 | A vulnerability, which was classified as problematic, was found in TrueConf Server 4.3.7. This affects an unknown part. The manipulation leads to basic cross s… |
CVE-2017-20108 | Low | 3.5 | 2022-06-29 | A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general… |
CVE-2022-0987 | Low | 3.3 | 2022-06-28 | A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure th… |
CVE-2022-33879 | Low | 3.3 | 2022-06-27 | The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new reg… |
CVE-2017-20098 | Low | 3.5 | 2022-06-27 | A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads… |
CVE-2022-2106 | Low | 3.8 | 2022-06-27 | Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attac… |
CVE-2017-20101 | Low | 3.5 | 2022-06-27 | A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The… |
CVE-2017-20100 | Low | 3.5 | 2022-06-27 | A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulatio… |
CVE-2022-2213 | Low | 3.5 | 2022-06-27 | A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown fu… |
CVE-2022-31017 | Low | 2.0 | 2022-06-25 | Zulip is an open-source team collaboration tool. Versions 2.1.0 through and including 5.2 are vulnerable to a logic error. A stream configured as private with… |
CVE-2021-20551 | Low | 3.3 | 2022-06-24 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force I… |
CVE-2017-20097 | Low | 3.5 | 2022-06-24 | A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality… |
CVE-2017-20096 | Low | 3.5 | 2022-06-24 | A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipulation leads to basic… |
CVE-2017-20094 | Low | 3.5 | 2022-06-24 | A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation… |
CVE-2017-20092 | Low | 3.5 | 2022-06-24 | A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnerability is an unknown functionality. The… |
CVE-2017-20089 | Low | 3.5 | 2022-06-23 | A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation lead… |
CVE-2017-20087 | Low | 3.5 | 2022-06-23 | A vulnerability, which was classified as problematic, has been found in Alpine PhotoTile for Instagram Plugin 1.2.7.7. Affected by this issue is some unknown f… |
CVE-2017-20085 | Low | 3.5 | 2022-06-23 | A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation l… |
CVE-2017-20060 | Low | 3.5 | 2022-06-20 | A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The… |
CVE-2017-20059 | Low | 3.5 | 2022-06-20 | A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC. Affected by this issue is some unknown functionality of the comp… |
CVE-2022-33981 | Low | 3.3 | 2022-06-18 | drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating… |
CVE-2017-20056 | Low | 3.5 | 2022-06-16 | A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. The manipulation lea… |
CVE-2017-20055 | Low | 3.5 | 2022-06-16 | A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basi… |
CVE-2017-20054 | Low | 3.5 | 2022-06-16 | A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality. Th… |
CVE-2022-31072 | Low | 2.5 | 2022-06-15 | Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the… |
CVE-2022-31071 | Low | 2.5 | 2022-06-15 | Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem w… |
CVE-2022-29452 | Low | 3.4 | 2022-06-15 | Authenticated (editor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Export All URLs plugin <= 4.1 at WordPress. |
CVE-2022-2087 | Low | 3.5 | 2022-06-15 | A vulnerability, which was classified as problematic, was found in SourceCodester Bank Management System 1.0. This affects the file /mnotice.php?id=2. The mani… |
CVE-2022-29615 | Low | 3.4 | 2022-06-14 | SAP NetWeaver Developer Studio (NWDS) - version 7.50, is based on Eclipse, which contains the logging framework log4j in version 1.x. The application's confide… |
CVE-2022-29482 | Low | 3.7 | 2022-06-14 | 'Mobaoku-Auction&Flea Market' App for iOS versions prior to 5.5.16 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encr… |
CVE-2022-29247 | Low | 2.2 | 2022-06-13 | Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerability in versions prior to 18.0.0-beta… |
CVE-2022-2061 | Low | 3.3 | 2022-06-13 | Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0. |
CVE-2022-32740 | Low | 3.5 | 2022-06-13 | A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances. |
CVE-2022-32739 | Low | 3.5 | 2022-06-13 | When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number. |
CVE-2018-25039 | Low | 3.5 | 2022-06-12 | A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlB… |
CVE-2018-25038 | Low | 3.5 | 2022-06-12 | A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The man… |
CVE-2018-25037 | Low | 3.5 | 2022-06-12 | A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/… |
CVE-2018-25036 | Low | 3.5 | 2022-06-12 | A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the fi… |
CVE-2018-25035 | Low | 3.5 | 2022-06-12 | A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL… |
CVE-2018-25034 | Low | 3.5 | 2022-06-12 | A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /gofo… |
CVE-2022-22426 | Low | 3.3 | 2022-06-10 | IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of prop… |
CVE-2021-42811 | Low | 3.3 | 2022-06-10 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrar… |
CVE-2017-20036 | Low | 3.5 | 2022-06-10 | A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ of the component Bo… |
CVE-2017-20035 | Low | 3.5 | 2022-06-10 | A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of… |
CVE-2017-20034 | Low | 3.5 | 2022-06-10 | A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the file /lists/admin/ of the component List N… |
CVE-2017-20031 | Low | 2.7 | 2022-06-10 | A vulnerability was found in PHPList 3.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation o… |
CVE-2019-25070 | Low | 3.5 | 2022-06-09 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in WolfCMS up to 0.8.3.1. It has been rated as problematic. This issue affects some unknown processin… |
CVE-2022-2020 | Low | 2.4 | 2022-06-09 | A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Affected by this issue is some unknown fun… |
CVE-2022-29254 | Low | 3.7 | 2022-06-09 | silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like… |
CVE-2022-1690 | Low | 2.7 | 2022-06-08 | The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page… |
CVE-2022-1689 | Low | 2.7 | 2022-06-08 | The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via th… |
CVE-2022-1688 | Low | 2.7 | 2022-06-08 | The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard… |
CVE-2022-1687 | Low | 2.7 | 2022-06-08 | The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using it in a SQL statement via the Manage Slide… |
CVE-2022-1686 | Low | 2.7 | 2022-06-08 | The Five Minute Webshop WordPress plugin through 1.3.2 does not sanitise and escape the id parameter before using it in a SQL statement when editing a product… |
CVE-2022-1684 | Low | 2.7 | 2022-06-08 | The Cube Slider WordPress plugin through 1.2 does not sanitise and escape the idslider parameter before using it in various SQL queries, leading to SQL Injecti… |
CVE-2020-36544 | Low | 3.5 | 2022-06-08 | A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manip… |
CVE-2022-30749 | Low | 3.3 | 2022-06-07 | Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity. |
CVE-2022-30742 | Low | 3.3 | 2022-06-07 | Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permissio to get… |
CVE-2022-30741 | Low | 3.3 | 2022-06-07 | Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permission to… |
CVE-2022-30728 | Low | 1.9 | 2022-06-07 | Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information. |
CVE-2022-30729 | Low | 3.3 | 2022-06-07 | Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code sca… |
CVE-2022-30721 | Low | 2.5 | 2022-06-07 | Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash. |
CVE-2022-30720 | Low | 2.5 | 2022-06-07 | Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash. |
CVE-2022-30719 | Low | 2.5 | 2022-06-07 | Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash. |
CVE-2022-30714 | Low | 1.9 | 2022-06-07 | Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information. |
CVE-2022-30709 | Low | 2.5 | 2022-06-07 | Improper input validation check logic vulnerability in SECRIL prior to SMR Jun-2022 Release 1 allows attackers to trigger crash. |
CVE-2022-28794 | Low | 2.2 | 2022-06-07 | Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information. |
CVE-2020-36533 | Low | 3.7 | 2022-06-07 | A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handler. The manipulatio… |
CVE-2020-36527 | Low | 3.5 | 2022-06-07 | A vulnerability, which was classified as problematic, has been found in Server Status. This issue affects some unknown processing of the component HTTP Status/… |
CVE-2020-36526 | Low | 3.5 | 2022-06-07 | A vulnerability classified as problematic was found in Countdown Timer. This vulnerability affects unknown code of the component Macro Handler. The manipulatio… |
CVE-2020-36525 | Low | 3.5 | 2022-06-07 | A vulnerability classified as problematic has been found in Linking. This affects an unknown part of the component New Windows Macro. The manipulation leads to… |
CVE-2020-36524 | Low | 3.5 | 2022-06-07 | A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the component UI-Image/… |
CVE-2020-36523 | Low | 3.5 | 2022-06-07 | A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. Th… |