| adobe -- acrobat_reader |
Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
2022-10-14 |
7.8 |
CVE-2022-42339 MISC |
| adobe -- acrobat_reader |
Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
2022-10-14 |
7.8 |
CVE-2022-38450 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interaction. |
2022-10-14 |
7.5 |
CVE-2022-38420 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction. |
2022-10-14 |
7.5 |
CVE-2022-38422 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction. |
2022-10-14 |
7.5 |
CVE-2022-42340 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction. |
2022-10-14 |
7.5 |
CVE-2022-42341 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. |
2022-10-14 |
9.8 |
CVE-2022-35710 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. |
2022-10-14 |
9.8 |
CVE-2022-35711 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. |
2022-10-14 |
9.8 |
CVE-2022-35712 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. |
2022-10-14 |
9.8 |
CVE-2022-38418 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but does require administrator privileges. |
2022-10-14 |
7.2 |
CVE-2022-38421 MISC |
| adobe -- coldfusion |
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. Exploitation of this issue does not require user interaction, but does require administrator privileges. |
2022-10-14 |
7.2 |
CVE-2022-38424 MISC |
| adobe -- commerce |
Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution. |
2022-10-14 |
10 |
CVE-2022-35698 MISC |
| adobe -- dimension |
Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
2022-10-14 |
7.8 |
CVE-2022-38440 MISC |
| adobe -- dimension |
Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
2022-10-14 |
7.8 |
CVE-2022-38442 MISC |
| adobe -- dimension |
Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
2022-10-14 |
7.8 |
CVE-2022-38446 MISC |
| adobe -- dimension |
Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
2022-10-14 |
7.8 |
CVE-2022-38441 MISC |
| adobe -- dimension |
Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
2022-10-14 |
7.8 |
CVE-2022-38447 MISC |
| adobe -- dimension |
Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
2022-10-14 |
7.8 |
CVE-2022-38448 MISC |
| apache -- shiro |
Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher. |
2022-10-12 |
9.8 |
CVE-2022-40664 CONFIRM MLIST MLIST MLIST |
| arraynetworks -- arrayos_ag |
Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.x is unaffected. |
2022-10-13 |
9.8 |
CVE-2022-42897 MISC MISC |
| arubanetworks -- instant |
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities. |
2022-10-07 |
9.8 |
CVE-2022-37885 MISC |
| arubanetworks -- instant |
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities. |
2022-10-07 |
9.8 |
CVE-2022-37886 MISC |
| arubanetworks -- instant |
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities. |
2022-10-07 |
9.8 |
CVE-2022-37887 MISC |
| arubanetworks -- instant |
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities. |
2022-10-07 |
9.8 |
CVE-2022-37889 MISC |
| arubanetworks -- instant |
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities. |
2022-10-07 |
9.8 |
CVE-2022-37890 MISC |
| arubanetworks -- instant |
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities. |
2022-10-07 |
9.8 |
CVE-2022-37891 MISC |
| arubanetworks -- instant |
An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InstantOS that address this security vulnerability. |
2022-10-07 |
7.8 |
CVE-2022-37893 MISC |
| autodesk -- revit |
A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. |
2022-10-07 |
7.8 |
CVE-2021-40162 MISC |
| autodesk -- revit |
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component. |
2022-10-07 |
7.8 |
CVE-2021-40163 MISC |
| autodesk -- revit |
A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. |
2022-10-07 |
7.8 |
CVE-2021-40164 MISC |
| autodesk -- revit |
A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. |
2022-10-07 |
7.8 |
CVE-2021-40165 MISC |
| autodesk -- revit |
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code. |
2022-10-07 |
7.8 |
CVE-2021-40166 MISC |
| bentley -- microstation |
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View. |
2022-10-13 |
7.8 |
CVE-2022-42899 MISC |
| bentley -- microstation |
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening crafted FBX files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View. |
2022-10-13 |
7.8 |
CVE-2022-42900 MISC |
| bentley -- microstation |
Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View. |
2022-10-13 |
7.8 |
CVE-2022-42901 MISC |
| boodskap -- iot_platform |
Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/. |
2022-10-13 |
8.8 |
CVE-2022-35135 MISC |
| browserify-shim_project -- browserify-shim |
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js. |
2022-10-11 |
9.8 |
CVE-2022-37617 MISC MISC MISC |
| cassianetworks -- access_controller |
An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1. |
2022-10-14 |
7.5 |
CVE-2021-22685 CONFIRM CONFIRM |
| church_management_system_project -- church_management_system |
An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
2022-10-12 |
7.2 |
CVE-2022-41406 MISC |
| cisco -- ios |
A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to improper handling of resources during an exceptional situation. An attacker could exploit this vulnerability by continuously connecting to an affected device and sending specific SSH requests. A successful exploit could allow the attacker to cause the affected device to reload. |
2022-10-10 |
7.7 |
CVE-2022-20920 CISCO |
| cisco -- ios_xe |
A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a logic error that occurs when an affected device inspects certain TCP DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through the affected device that is performing NAT for DNS packets. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on the affected device. Note: This vulnerability can be exploited only by sending IPv4 TCP packets through an affected device. This vulnerability cannot be exploited by sending IPv6 traffic. |
2022-10-10 |
8.6 |
CVE-2022-20837 CISCO |
| cisco -- ios_xe |
A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation of IPv4 traffic. An attacker could exploit this vulnerability by sending a malformed packet out of an affected MPLS-enabled interface. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. |
2022-10-10 |
8.6 |
CVE-2022-20870 CISCO |
| cisco -- ios_xe |
A vulnerability in the implementation of IPv6 VPN over MPLS (6VPE) with Zone-Based Firewall (ZBFW) of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling of an IPv6 packet that is forwarded from an MPLS and ZBFW-enabled interface in a 6VPE deployment. An attacker could exploit this vulnerability by sending a crafted IPv6 packet sourced from a device on the IPv6-enabled virtual routing and forwarding (VRF) interface through the affected device. A successful exploit could allow the attacker to reload the device, resulting in a DoS condition. |
2022-10-10 |
7.4 |
CVE-2022-20915 CISCO |
| clippercms -- clippercms |
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php. |
2022-10-13 |
9.8 |
CVE-2022-41495 MISC |
| clippercms -- clippercms |
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php. |
2022-10-13 |
9.8 |
CVE-2022-41497 MISC |
| dedecms -- dedecms |
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/file_manage_control.php. |
2022-10-12 |
7.2 |
CVE-2022-40921 MISC |
| dell -- alienware_area-51_r5_firmware |
Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
2022-10-12 |
7.8 |
CVE-2022-34390 MISC |
| dell -- alienware_area-51_r5_firmware |
Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
2022-10-12 |
7.8 |
CVE-2022-34391 MISC |
| dell -- alienware_area_51m_r1_firmware |
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
2022-10-12 |
7.8 |
CVE-2022-32485 MISC |
| dell -- alienware_area_51m_r1_firmware |
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
2022-10-12 |
7.8 |
CVE-2022-32487 MISC |
| dell -- alienware_area_51m_r1_firmware |
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
2022-10-12 |
7.8 |
CVE-2022-32488 MISC |
| dell -- alienware_area_51m_r1_firmware |
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
2022-10-12 |
7.8 |
CVE-2022-32489 MISC |
| dell -- alienware_area_51m_r1_firmware |
Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM. |
2022-10-12 |
7.8 |
CVE-2022-32491 MISC |
| dell -- alienware_area_51m_r1_firmware |
Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
2022-10-12 |
7.8 |
CVE-2022-32493 MISC |
| dell -- bios |
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
2022-10-11 |
8.8 |
CVE-2022-32486 MISC |
| dell -- bios |
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
2022-10-11 |
8.8 |
CVE-2022-32492 MISC |
| dell -- container_storage_modules |
Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi and gobrick libraries which could lead to OS command injection. A remote unauthenticated attacker could exploit this vulnerability leading to unintentional access to path outside of restricted directory. |
2022-10-11 |
8.8 |
CVE-2022-34426 MISC |
| dell -- container_storage_modules |
Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries. A remote unauthenticated attacker could exploit this vulnerability leading to modification of intended OS command execution. |
2022-10-11 |
8.8 |
CVE-2022-34427 MISC |
| dell -- enterprise_sonic_distribution |
Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication. |
2022-10-10 |
7.5 |
CVE-2022-34425 MISC |
| dell -- geodrive |
Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin user could potentially exploit this vulnerability and view sensitive information. |
2022-10-12 |
7.8 |
CVE-2022-33919 MISC |
| dell -- geodrive |
Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. |
2022-10-12 |
7.8 |
CVE-2022-33920 MISC |
| dell -- geodrive |
Dell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. |
2022-10-12 |
7.8 |
CVE-2022-33921 MISC |
| dell -- geodrive |
Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. Dell recommends customers to upgrade at the earliest opportunity. |
2022-10-12 |
7.8 |
CVE-2022-33922 MISC |
| dell -- geodrive |
Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive service: NT AUTHORITY\SYSTEM. |
2022-10-12 |
7.1 |
CVE-2022-33937 MISC |
| dell -- hybrid_client |
Dell Hybrid Client below 1.8 version contains a gedit vulnerability. A guest attacker could potentially exploit this vulnerability, allowing deletion of user and some system files and folders. |
2022-10-11 |
8.2 |
CVE-2022-34432 MISC |
| dell -- hybrid_client |
Dell Hybrid Client below 1.8 version contains a Zip Bomb Vulnerability in UI. A guest privilege attacker could potentially exploit this vulnerability, leading to system files modification. |
2022-10-11 |
7.5 |
CVE-2022-34430 MISC |
| dell -- xtremio_management_server |
Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account. |
2022-10-12 |
9.8 |
CVE-2022-31228 MISC |
| democritus -- d8s-algorithms |
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-42040 MISC MISC MISC |
| democritus -- d8s-archives |
The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-41383 MISC MISC MISC |
| democritus -- d8s-asns |
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-42037 MISC MISC MISC |
| democritus -- d8s-asns |
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-42044 MISC MISC MISC |
| democritus -- d8s-domains |
The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-41384 MISC MISC MISC |
| democritus -- d8s-file-system |
The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-42041 MISC MISC MISC |
| democritus -- d8s-html |
The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-41385 MISC MISC MISC |
| democritus -- d8s-ip-addresses |
The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-42038 MISC MISC MISC |
| democritus -- d8s-json |
The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-41382 MISC MISC MISC |
| democritus -- d8s-lists |
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-42039 MISC MISC MISC |
| democritus -- d8s-networking |
The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-42042 MISC MISC MISC |
| democritus -- d8s-pdfs |
The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-41387 MISC MISC MISC |
| democritus -- d8s-urls |
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-42036 MISC MISC MISC |
| democritus -- d8s-utility |
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-41381 MISC MISC MISC |
| democritus -- d8s-utility |
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-41386 MISC MISC MISC |
| democritus -- d8s-xml |
The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-42043 MISC MISC MISC |
| democritus -- d8s-yaml |
The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0. |
2022-10-11 |
9.8 |
CVE-2022-41380 MISC MISC MISC |
| django-mfa2_project -- django-mfa2 |
mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge is not invalidated after usage. |
2022-10-11 |
7.5 |
CVE-2022-42731 MISC MISC MISC |
| dolibarr -- dolibarr_erp/crm |
Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval. |
2022-10-12 |
9.8 |
CVE-2022-40871 MISC |
| dotpdn -- paint.net |
dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2). |
2022-10-12 |
9.8 |
CVE-2018-18446 MISC MISC MISC |
| dotpdn -- paint.net |
dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2). |
2022-10-12 |
9.8 |
CVE-2018-18447 MISC MISC MISC |
| dropbear_ssh_project -- dropbear_ssh |
An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2 tokens or SSH-Askpass. Thus, it allows an attacker to abuse a forwarded agent for logging on to another server unnoticed. |
2022-10-12 |
7.5 |
CVE-2021-36369 MISC MISC MISC |
| f-secure -- elements_endpoint_protection |
Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash. |
2022-10-12 |
7.5 |
CVE-2022-28887 MISC MISC |
| facebook -- hermes |
An out of bounds write in hermes, while handling large arrays, prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected. |
2022-10-11 |
9.8 |
CVE-2022-32234 CONFIRM CONFIRM |
| facebook -- hermes |
A write-what-where condition in hermes caused by an integer overflow, prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected. |
2022-10-11 |
9.8 |
CVE-2022-35289 CONFIRM CONFIRM |
| facebook -- hermes |
An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and subsequently execute arbitrary code. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected. |
2022-10-11 |
9.8 |
CVE-2022-40138 CONFIRM CONFIRM |
| fastify -- fastify |
fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of service via malicious use of the Content-Type header. An attacker can send an invalid Content-Type header that can cause the application to crash. This issue has been addressed in commit fbb07e8d and will be included in release version 4.8.1. Users are advised to upgrade. Users unable to upgrade may manually filter out http content with malicious Content-Type headers. |
2022-10-10 |
7.5 |
CVE-2022-39288 CONFIRM MISC MISC |
| foresightsports -- gc3_launch_monitor_firmware |
Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property. |
2022-10-13 |
8 |
CVE-2022-40187 MISC MISC MISC MISC |
| fortinet -- fortios |
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through 6.2.10, FortiOS version 6.4.0 through 6.4.8, FortiOS version 7.0.0 through 7.0.3 allows attacker to execute privileged commands on a linked FortiSwitch via diagnostic CLI commands. |
2022-10-10 |
8 |
CVE-2021-44171 CONFIRM |
| freerdp -- freerdp |
FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please upgrade to 2.8.1 where this issue is patched. If unable to upgrade, do not use parallel port redirection (/parallel command line switch) as a workaround. |
2022-10-12 |
7.5 |
CVE-2022-39282 MISC CONFIRM |
| freerdp -- freerdp |
FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the /video switch. |
2022-10-12 |
7.5 |
CVE-2022-39283 MISC CONFIRM |
| gh-pages_project -- gh-pages |
Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js. |
2022-10-12 |
9.8 |
CVE-2022-37611 MISC MISC MISC |
| gogs -- gogs |
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover. |
2022-10-11 |
9 |
CVE-2022-32174 MISC MISC |
| google -- android |
In CarSettings of app packages, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-220741473 |
2022-10-11 |
8.8 |
CVE-2022-20429 MISC |
| google -- android |
In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242345178 |
2022-10-14 |
7.8 |
CVE-2021-0699 MISC |
| google -- android |
In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242345085 |
2022-10-11 |
7.8 |
CVE-2021-0951 MISC |
| google -- android |
In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223086933References: N/A |
2022-10-14 |
7.8 |
CVE-2022-20397 MISC |
| google -- android |
In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction of starting activity from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-231322873 |
2022-10-11 |
7.8 |
CVE-2022-20415 MISC |
| google -- android |
In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-237717857 |
2022-10-11 |
7.8 |
CVE-2022-20416 MISC |
| google -- android |
In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-237288416 |
2022-10-11 |
7.8 |
CVE-2022-20417 MISC |
| google -- android |
In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-237290578 |
2022-10-11 |
7.8 |
CVE-2022-20419 MISC |
| google -- android |
In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238377411 |
2022-10-11 |
7.8 |
CVE-2022-20420 MISC |
| google -- android |
In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel |
2022-10-11 |
7.8 |
CVE-2022-20421 MISC |
| google -- android |
There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242221233 |
2022-10-11 |
7.8 |
CVE-2022-20430 MISC |
| google -- android |
There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242221238 |
2022-10-11 |
7.8 |
CVE-2022-20431 MISC |
| google -- android |
There is an missing authorization issue in the system service. Since the component does not have permission check and permission protection,, resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242221899 |
2022-10-11 |
7.8 |
CVE-2022-20432 MISC |
| google -- android |
There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242221901 |
2022-10-11 |
7.8 |
CVE-2022-20433 MISC |
| google -- android |
There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242244028 |
2022-10-11 |
7.8 |
CVE-2022-20434 MISC |
| google -- android |
There is a Unauthorized service in the system service, may cause the system reboot. Since the component does not have permission check and permission protection, resulting in EoP problem.Product: AndroidVersions: Android SoCAndroid ID: A-242248367 |
2022-10-11 |
7.8 |
CVE-2022-20435 MISC |
| google -- android |
There is an unauthorized service in the system service. Since the component does not have permission check, resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242248369 |
2022-10-11 |
7.8 |
CVE-2022-20436 MISC |
| google -- android |
In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121. |
2022-10-07 |
7.8 |
CVE-2022-26471 MISC |
| google -- android |
In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319095; Issue ID: ALPS07319095. |
2022-10-07 |
7.8 |
CVE-2022-26472 MISC |
| google -- android |
A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execution. |
2022-10-07 |
7.8 |
CVE-2022-39852 MISC |
| google -- android |
A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault. |
2022-10-07 |
7.8 |
CVE-2022-39853 MISC |
| google -- android |
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-205570663 |
2022-10-11 |
7.5 |
CVE-2022-20410 MISC |
| google -- android |
In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-231986464 |
2022-10-11 |
7.5 |
CVE-2022-20418 MISC |
| google -- android |
In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07030600; Issue ID: ALPS07030600. |
2022-10-07 |
7.5 |
CVE-2022-32589 MISC |
| google -- android |
In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07257259; Issue ID: ALPS07257259. |
2022-10-07 |
7.5 |
CVE-2022-32591 MISC |
| google -- android |
In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242344778 |
2022-10-11 |
7 |
CVE-2021-0696 MISC |
| google -- android |
In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel |
2022-10-11 |
7 |
CVE-2022-20422 MISC |
| google -- protobuf-java |
A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above. |
2022-10-12 |
7.5 |
CVE-2022-3171 CONFIRM |
| gradle -- enterprise |
An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and send emails with arbitrary text content to the configured installation-administrator contact address, via HTTP access to an accidentally exposed internal endpoint. This is fixed in 2022.3.2. |
2022-10-07 |
7.5 |
CVE-2022-41574 MISC MISC |
| grafana -- grafana |
Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature verification. An attacker can convince a server admin to download and successfully run a malicious plugin even though unsigned plugins are not allowed. Versions 9.1.8 and 8.5.14 contain a patch for this issue. As a workaround, do not install plugins downloaded from untrusted sources. |
2022-10-13 |
7.8 |
CVE-2022-31123 CONFIRM MISC |
| grafana -- grafana |
Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.8 and 8.5.14 could leak authentication tokens to some destination plugins under some conditions. The vulnerability impacts data source and plugin proxy endpoints with authentication tokens. The destination plugin could receive a user's Grafana authentication token. Versions 9.1.8 and 8.5.14 contain a patch for this issue. As a workaround, do not use API keys, JWT authentication, or any HTTP Header based authentication. |
2022-10-13 |
7.5 |
CVE-2022-31130 CONFIRM MISC MISC MISC |
| grunt-karma_project -- grunt-karma |
Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js. |
2022-10-14 |
9.8 |
CVE-2022-37602 MISC MISC MISC |
| hancom -- hancom_office_2020 |
A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability. |
2022-10-07 |
7.8 |
CVE-2022-33896 MISC |
| hashicorp -- packer |
An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root. |
2022-10-11 |
7.8 |
CVE-2022-42717 MISC MISC MISC |
| huawei -- harmonyos |
The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices. |
2022-10-14 |
7.8 |
CVE-2022-41576 MISC MISC |
| huawei -- harmonyos |
The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may cause out-of-bounds read in the kernel, which affects the device confidentiality and availability. |
2022-10-14 |
7.1 |
CVE-2022-41577 MISC MISC |
| human_resource_management_system_project -- human_resource_management_system |
A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /employeeview.php of the component Image File Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210559. |
2022-10-12 |
9.8 |
CVE-2022-3458 N/A |
| human_resource_management_system_project -- human_resource_management_system |
A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerability affects unknown code of the component Profile Photo Handler. The manipulation of the argument parameter leads to os command injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-210772. |
2022-10-13 |
8.8 |
CVE-2022-3492 MISC |
| human_resource_management_system_project -- human_resource_management_system |
A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Admin Panel. The manipulation leads to improper access controls. The attack may be initiated remotely. The identifier VDB-210785 was assigned to this vulnerability. |
2022-10-14 |
8.8 |
CVE-2022-3496 MISC |
| idreamsoft -- icms |
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php. |
2022-10-13 |
9.8 |
CVE-2022-41496 MISC |
| ikuai8 -- ikuaios |
iKuai8 v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability. |
2022-10-12 |
8.8 |
CVE-2022-40469 MISC MISC MISC |
| ikus-soft -- rdiffweb |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. |
2022-10-14 |
9.8 |
CVE-2022-3439 MISC CONFIRM |
| ikus-soft -- rdiffweb |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. |
2022-10-13 |
9.8 |
CVE-2022-3456 MISC CONFIRM |
| ikus-soft -- rdiffweb |
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. |
2022-10-13 |
9.8 |
CVE-2022-3457 MISC CONFIRM |
| ini4j_project -- ini4j |
An issue in the fetch() method in the BasicProfile class of org.ini4j before v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors. |
2022-10-11 |
7.5 |
CVE-2022-41404 MISC |
| interspire -- email_marketer |
Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a /admin/temp/surveys/ URI. NOTE: this issue exists because of an incomplete fix for CVE-2018-19550. |
2022-10-11 |
8.8 |
CVE-2022-40777 MISC MISC |
| isc -- dhcp |
In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort. |
2022-10-07 |
7.5 |
CVE-2022-2928 CONFIRM MLIST FEDORA |
| jflyfox -- jfinal_cms |
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. |
2022-10-13 |
8.8 |
CVE-2022-37208 MISC MISC |
| jiusi -- jiusi_oa |
A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the argument inforid leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-210709 was assigned to this vulnerability. |
2022-10-12 |
9.8 |
CVE-2022-3467 MISC MISC |
| js-beautify_project -- js-beautify |
Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js. |
2022-10-11 |
9.8 |
CVE-2022-37609 MISC MISC MISC |
| linaro -- lava |
In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server. |
2022-10-13 |
8.8 |
CVE-2022-42902 MISC MISC |
| linuxmint -- warpinator |
Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links. |
2022-10-10 |
7.5 |
CVE-2022-42725 MISC MISC MISC MISC |
| mediabridgeproducts -- mlwr-ac1200r_firmware |
A vulnerability classified as critical was found in Mediabridge Medialink. This vulnerability affects unknown code of the file /index.asp. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210700. |
2022-10-12 |
9.8 |
CVE-2022-3465 N/A N/A |
| melistechnology -- melis-asset-manager |
MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can read arbitrary files on affected versions of melisplatform/melis-asset-manager, leading to the disclosure of sensitive information. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-asset-manager >= 5.0.1. This issue was addressed by restricting access to files to intended directories only. |
2022-10-11 |
7.5 |
CVE-2022-39296 CONFIRM MISC |
| melistechnology -- meliscms |
MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many administration tools. Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-cms, and ultimately leads to the execution of arbitrary PHP code on the system. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-cms >= 5.0.1. This issue was addressed by restricting allowed classes when deserializing user-controlled data. |
2022-10-12 |
9.8 |
CVE-2022-39297 MISC CONFIRM |
| melistechnology -- meliscms |
MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-front, and ultimately leads to the execution of arbitrary PHP code on the system. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-front >= 5.0.1. This issue was addressed by restricting allowed classes when deserializing user-controlled data. |
2022-10-12 |
9.8 |
CVE-2022-39298 MISC CONFIRM |
| merchandise_online_store_project -- merchandise_online_store |
A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard. |
2022-10-11 |
8.8 |
CVE-2022-42238 MISC |
| mi -- xiaomi |
A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity verification failure, which can be exploited by an attacker who can obtain a brief elevation of privilege. |
2022-10-11 |
9.8 |
CVE-2020-14129 MISC |
| mi -- xiaomi |
The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center (MiSRC) to jointly ensure the safe access of millions of Xiaomi users worldwide Life. |
2022-10-11 |
9.8 |
CVE-2020-14131 MISC |
| microsoft -- .net_core |
NuGet Client Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-41032 MISC |
| microsoft -- azure_rtos_usbx |
Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors. Azure RTOS USBX implementation of host support for USB CDC ECM includes an integer underflow and a buffer overflow in the _ux_host_class_cdc_ecm_mac_address_get function which may be potentially exploited to achieve remote code execution or denial of service. Setting mac address string descriptor length to a 0 or 1 allows an attacker to introduce an integer underflow followed (string_length) by a buffer overflow of the cdc_ecm -> ux_host_class_cdc_ecm_node_id array. This may allow one to redirect the code execution flow or introduce a denial of service. The fix has been included in USBX release 6.1.12. Improved mac address string descriptor length validation to check for unexpectedly small values may be used as a workaround. |
2022-10-10 |
9.8 |
CVE-2022-36063 CONFIRM MISC MISC |
| microsoft -- azure_stack_edge |
Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability. |
2022-10-11 |
10 |
CVE-2022-37968 MISC |
| microsoft -- jupyter |
Visual Studio Code Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-41083 MISC |
| microsoft -- malware_protection_engine |
Microsoft Windows Defender Elevation of Privilege Vulnerability. |
2022-10-11 |
7.1 |
CVE-2022-37971 MISC |
| microsoft -- office |
Microsoft Office Remote Code Execution Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-38048 MISC |
| microsoft -- office |
Microsoft Office Graphics Remote Code Execution Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-38049 MISC |
| microsoft -- office |
Microsoft Word Remote Code Execution Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-41031 MISC |
| microsoft -- sharepoint_foundation |
Microsoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41036, CVE-2022-41037, CVE-2022-41038. |
2022-10-11 |
8.8 |
CVE-2022-38053 MISC |
| microsoft -- sharepoint_foundation |
Microsoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-38053, CVE-2022-41037, CVE-2022-41038. |
2022-10-11 |
8.8 |
CVE-2022-41036 MISC |
| microsoft -- sharepoint_foundation |
Microsoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-38053, CVE-2022-41036, CVE-2022-41038. |
2022-10-11 |
8.8 |
CVE-2022-41037 MISC |
| microsoft -- sharepoint_foundation |
Microsoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-38053, CVE-2022-41036, CVE-2022-41037. |
2022-10-11 |
8.8 |
CVE-2022-41038 MISC |
| microsoft -- visual_studio_code |
Visual Studio Code Remote Code Execution Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-41034 MISC |
| microsoft -- visual_studio_code |
Visual Studio Code Information Disclosure Vulnerability. |
2022-10-11 |
7.4 |
CVE-2022-41042 MISC |
| microsoft -- windows_10 |
Windows Group Policy Elevation of Privilege Vulnerability. |
2022-10-11 |
8.8 |
CVE-2022-37975 MISC |
| microsoft -- windows_10 |
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-38031. |
2022-10-11 |
8.8 |
CVE-2022-37982 MISC |
| microsoft -- windows_10 |
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability. |
2022-10-11 |
8.8 |
CVE-2022-38016 MISC |
| microsoft -- windows_10 |
Windows Local Session Manager (LSM) Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-37998. |
2022-10-11 |
8.6 |
CVE-2022-37973 MISC |
| microsoft -- windows_10 |
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24504, CVE-2022-30198, CVE-2022-33634, CVE-2022-38000, CVE-2022-38047, CVE-2022-41081. |
2022-10-11 |
8.1 |
CVE-2022-22035 MISC |
| microsoft -- windows_10 |
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22035, CVE-2022-30198, CVE-2022-33634, CVE-2022-38000, CVE-2022-38047, CVE-2022-41081. |
2022-10-11 |
8.1 |
CVE-2022-24504 MISC |
| microsoft -- windows_10 |
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22035, CVE-2022-24504, CVE-2022-33634, CVE-2022-38000, CVE-2022-38047, CVE-2022-41081. |
2022-10-11 |
8.1 |
CVE-2022-30198 MISC |
| microsoft -- windows_10 |
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22035, CVE-2022-24504, CVE-2022-30198, CVE-2022-38000, CVE-2022-38047, CVE-2022-41081. |
2022-10-11 |
8.1 |
CVE-2022-33634 MISC |
| microsoft -- windows_10 |
Windows GDI+ Remote Code Execution Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-33635 MISC |
| microsoft -- windows_10 |
Windows Hyper-V Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-37979 MISC |
| microsoft -- windows_10 |
Windows DHCP Client Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-37980 MISC |
| microsoft -- windows_10 |
Windows WLAN Service Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-37984 MISC |
| microsoft -- windows_10 |
Windows Win32k Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-37986 MISC |
| microsoft -- windows_10 |
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37988, CVE-2022-37990, CVE-2022-37991, CVE-2022-38022, CVE-2022-38037, CVE-2022-38038, CVE-2022-38039. |
2022-10-11 |
7.8 |
CVE-2022-37995 MISC |
| microsoft -- windows_10 |
Windows Resilient File System Elevation of Privilege. |
2022-10-11 |
7.8 |
CVE-2022-38003 MISC |
| microsoft -- windows_10 |
Windows Local Session Manager (LSM) Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-37973. |
2022-10-11 |
7.7 |
CVE-2022-37998 MISC |
| microsoft -- windows_10 |
Windows TCP/IP Driver Denial of Service Vulnerability. |
2022-10-11 |
7.5 |
CVE-2022-33645 MISC |
| microsoft -- windows_10 |
Windows CryptoAPI Spoofing Vulnerability. |
2022-10-11 |
7.5 |
CVE-2022-34689 MISC |
| microsoft -- windows_10 |
Windows Active Directory Certificate Services Security Feature Bypass. |
2022-10-11 |
7.5 |
CVE-2022-37978 MISC |
| microsoft -- windows_server_2008 |
Active Directory Certificate Services Elevation of Privilege Vulnerability. |
2022-10-11 |
8.8 |
CVE-2022-37976 MISC |
| microsoft -- windows_server_2008 |
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-37982. |
2022-10-11 |
8.8 |
CVE-2022-38031 MISC |
| microsoft -- windows_server_2008 |
Windows Workstation Service Elevation of Privilege Vulnerability. |
2022-10-11 |
8.8 |
CVE-2022-38034 MISC |
| microsoft -- windows_server_2008 |
Microsoft ODBC Driver Remote Code Execution Vulnerability. |
2022-10-11 |
8.8 |
CVE-2022-38040 MISC |
| microsoft -- windows_server_2008 |
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22035, CVE-2022-24504, CVE-2022-30198, CVE-2022-33634, CVE-2022-38047, CVE-2022-41081. |
2022-10-11 |
8.1 |
CVE-2022-38000 MISC |
| microsoft -- windows_server_2008 |
Active Directory Domain Services Elevation of Privilege Vulnerability. |
2022-10-11 |
8.1 |
CVE-2022-38042 MISC |
| microsoft -- windows_server_2008 |
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22035, CVE-2022-24504, CVE-2022-30198, CVE-2022-33634, CVE-2022-38000, CVE-2022-41081. |
2022-10-11 |
8.1 |
CVE-2022-38047 MISC |
| microsoft -- windows_server_2008 |
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22035, CVE-2022-24504, CVE-2022-30198, CVE-2022-33634, CVE-2022-38000, CVE-2022-38047. |
2022-10-11 |
8.1 |
CVE-2022-41081 MISC |
| microsoft -- windows_server_2008 |
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37989. |
2022-10-11 |
7.8 |
CVE-2022-37987 MISC |
| microsoft -- windows_server_2008 |
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37990, CVE-2022-37991, CVE-2022-37995, CVE-2022-38022, CVE-2022-38037, CVE-2022-38038, CVE-2022-38039. |
2022-10-11 |
7.8 |
CVE-2022-37988 MISC |
| microsoft -- windows_server_2008 |
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37987. |
2022-10-11 |
7.8 |
CVE-2022-37989 MISC |
| microsoft -- windows_server_2008 |
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37988, CVE-2022-37991, CVE-2022-37995, CVE-2022-38022, CVE-2022-38037, CVE-2022-38038, CVE-2022-38039. |
2022-10-11 |
7.8 |
CVE-2022-37990 MISC |
| microsoft -- windows_server_2008 |
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37988, CVE-2022-37990, CVE-2022-37995, CVE-2022-38022, CVE-2022-38037, CVE-2022-38038, CVE-2022-38039. |
2022-10-11 |
7.8 |
CVE-2022-37991 MISC |
| microsoft -- windows_server_2008 |
Windows Group Policy Preference Client Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37994, CVE-2022-37999. |
2022-10-11 |
7.8 |
CVE-2022-37993 MISC |
| microsoft -- windows_server_2008 |
Windows Group Policy Preference Client Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37993, CVE-2022-37999. |
2022-10-11 |
7.8 |
CVE-2022-37994 MISC |
| microsoft -- windows_server_2008 |
Windows Graphics Component Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-38051. |
2022-10-11 |
7.8 |
CVE-2022-37997 MISC |
| microsoft -- windows_server_2008 |
Windows Group Policy Preference Client Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37993, CVE-2022-37994. |
2022-10-11 |
7.8 |
CVE-2022-37999 MISC |
| microsoft -- windows_server_2008 |
Windows Print Spooler Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-38028 MISC |
| microsoft -- windows_server_2008 |
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37988, CVE-2022-37990, CVE-2022-37991, CVE-2022-37995, CVE-2022-38022, CVE-2022-38038, CVE-2022-38039. |
2022-10-11 |
7.8 |
CVE-2022-38037 MISC |
| microsoft -- windows_server_2008 |
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37988, CVE-2022-37990, CVE-2022-37991, CVE-2022-37995, CVE-2022-38022, CVE-2022-38037, CVE-2022-38039. |
2022-10-11 |
7.8 |
CVE-2022-38038 MISC |
| microsoft -- windows_server_2008 |
Windows CD-ROM File System Driver Remote Code Execution Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-38044 MISC |
| microsoft -- windows_server_2008 |
Windows Graphics Component Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37997. |
2022-10-11 |
7.8 |
CVE-2022-38051 MISC |
| microsoft -- windows_server_2008 |
Windows COM+ Event System Service Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-41033 MISC |
| microsoft -- windows_server_2008 |
Windows Secure Channel Denial of Service Vulnerability. |
2022-10-11 |
7.5 |
CVE-2022-38041 MISC |
| microsoft -- windows_server_2008 |
Windows Storage Elevation of Privilege Vulnerability. |
2022-10-11 |
7 |
CVE-2022-38027 MISC |
| microsoft -- windows_server_2008 |
Windows ALPC Elevation of Privilege Vulnerability. |
2022-10-11 |
7 |
CVE-2022-38029 MISC |
| microsoft -- windows_server_2012 |
Server Service Remote Protocol Elevation of Privilege Vulnerability. |
2022-10-11 |
9.1 |
CVE-2022-38045 MISC |
| microsoft -- windows_server_2012 |
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability. |
2022-10-11 |
7 |
CVE-2022-38021 MISC |
| microsoft -- windows_server_2019 |
Windows DWM Core Library Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-37970 MISC |
| microsoft -- windows_server_2019 |
Microsoft DWM Core Library Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-37983 MISC |
| microsoft -- windows_server_2019 |
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37988, CVE-2022-37990, CVE-2022-37991, CVE-2022-37995, CVE-2022-38022, CVE-2022-38037, CVE-2022-38038. |
2022-10-11 |
7.8 |
CVE-2022-38039 MISC |
| microsoft -- windows_server_2019 |
Win32k Elevation of Privilege Vulnerability. |
2022-10-11 |
7.8 |
CVE-2022-38050 MISC |
| microsoft -- windows_server_2019 |
Web Account Manager Information Disclosure Vulnerability. |
2022-10-11 |
7.5 |
CVE-2022-38046 MISC |
| microsoft -- windows_server_2022 |
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability. |
2022-10-11 |
7.5 |
CVE-2022-38036 MISC |
| mockery_project -- mockery |
Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf via the key variable in mockery.js. |
2022-10-12 |
9.8 |
CVE-2022-37614 MISC MISC MISC |
| newsletter_subscribe_(popup_+regular_module)project -- newsletter_subscribe(popup+_regular_module) |
OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/so_newletter_custom_popup/newsletter. |
2022-10-12 |
9.8 |
CVE-2022-41403 MISC |
| node_saml_project -- node_saml |
node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML element. Depending on the IDP used, fully unauthenticated attacks (e.g without access to a valid user) might also be feasible if generation of a signed message can be triggered. Users should upgrade to node-saml version 4.0.0-beta5 or newer. Disabling SAML authentication may be done as a workaround. |
2022-10-13 |
8.1 |
CVE-2022-39300 MISC CONFIRM |
| nokia -- airframe_bmc_web_gui_r18_firmware |
Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI < R18 Firmware v4.13.00. It does not properly validate requests for access to (or editing of) data and functionality in all endpoints under /#settings/* and /api/settings/*. By not verifying the permissions for access to resources, it allows a potential attacker to view pages, with sensitive data, that are not allowed, and modify system configurations also causing DoS, which should be accessed only by user with administration profile, bypassing all controls (without checking for user identity). |
2022-10-12 |
8.8 |
CVE-2022-28866 MISC MISC |
| ocomon_project -- ocomon |
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php. |
2022-10-13 |
9.8 |
CVE-2022-41390 MISC |
| ocomon_project -- ocomon |
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php. |
2022-10-13 |
9.8 |
CVE-2022-41391 MISC |
| online_diagnostic_lab_management_system_project -- online_diagnostic_lab_management_system |
Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell. |
2022-10-14 |
9.8 |
CVE-2022-42064 MISC |
| online_diagnostic_lab_management_system_project -- online_diagnostic_lab_management_system |
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. |
2022-10-13 |
7.2 |
CVE-2022-41533 MISC |
| online_diagnostic_lab_management_system_project -- online_diagnostic_lab_management_system |
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/createOrder.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. |
2022-10-13 |
7.2 |
CVE-2022-41534 MISC |
| online_diagnostic_lab_management_system_project -- online_diagnostic_lab_management_system |
Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=. |
2022-10-07 |
7.2 |
CVE-2022-42073 MISC |
| online_diagnostic_lab_management_system_project -- online_diagnostic_lab_management_system |
Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=. |
2022-10-07 |
7.2 |
CVE-2022-42074 MISC |
| online_leave_management_system_project -- online_leave_management_system |
An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
2022-10-07 |
7.2 |
CVE-2022-41379 MISC |
| online_pet_shop_we_app_project -- online_pet_shop_we_app |
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order. |
2022-10-12 |
9.8 |
CVE-2022-41408 MISC |
| online_pet_shop_we_app_project -- online_pet_shop_we_app |
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=maintenance/manage_category. |
2022-10-07 |
7.2 |
CVE-2022-41377 MISC |
| online_pet_shop_we_app_project -- online_pet_shop_we_app |
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/admin/?page=inventory/manage_inventory. |
2022-10-07 |
7.2 |
CVE-2022-41378 MISC |
| online_pet_shop_we_app_project -- online_pet_shop_we_app |
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order. |
2022-10-12 |
7.2 |
CVE-2022-41407 MISC |
| open_source_sacco_management_system_project -- open_source_sacco_management_system |
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_loan. |
2022-10-07 |
7.2 |
CVE-2022-41514 MISC |
| open_source_sacco_management_system_project -- open_source_sacco_management_system |
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_payment. |
2022-10-07 |
7.2 |
CVE-2022-41515 MISC |
| open_source_sacco_management_system_project -- open_source_sacco_management_system |
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_borrower. |
2022-10-12 |
7.2 |
CVE-2022-41530 MISC |
| open_source_sacco_management_system_project -- open_source_sacco_management_system |
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_plan. |
2022-10-12 |
7.2 |
CVE-2022-41532 MISC |
| openssl -- openssl |
OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and EVP_CipherInit_ex2() functions (as well as other similarly named encryption and decryption initialisation functions). Instead of using the custom cipher directly it incorrectly tries to fetch an equivalent cipher from the available providers. An equivalent cipher is found based on the NID passed to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID for a given cipher. However it is possible for an application to incorrectly pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When NID_undef is used in this way the OpenSSL encryption/decryption initialisation function will match the NULL cipher as being equivalent and will fetch this from the available providers. This will succeed if the default provider has been loaded (or if a third party provider has been loaded that offers this cipher). Using the NULL cipher means that the plaintext is emitted as the ciphertext. Applications are only affected by this issue if they call EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to an encryption/decryption initialisation function. Applications that only use SSL/TLS are not impacted by this issue. Fixed in OpenSSL 3.0.6 (Affected 3.0.0-3.0.5). |
2022-10-11 |
7.5 |
CVE-2022-3358 CONFIRM CONFIRM |
| paloaltonetworks -- pan-os |
An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions. |
2022-10-12 |
8.1 |
CVE-2022-0030 MISC |
| panini -- everest_engine |
Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a Trojan horse %PROGRAMDATA%\Panini\Everest.exe may be executed instead of the intended vendor-supplied EverestEngine.exe file. |
2022-10-07 |
7.8 |
CVE-2022-39959 MISC MISC |
| passport-saml_project -- passport-saml |
Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML element. Depending on the IDP used, fully unauthenticated attacks (e.g without access to a valid user) might also be feasible if generation of a signed message can be triggered. Users should upgrade to passport-saml version 3.2.2 or newer. The issue was also present in the beta releases of node-saml before version 4.0.0-beta.5. If you cannot upgrade, disabling SAML authentication may be done as a workaround. |
2022-10-12 |
8.1 |
CVE-2022-39299 CONFIRM MISC |
| powerline_gitstatus_project -- powerline_gitstatus |
powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerline-gitstatus, changing to a directory automatically runs git commands in order to display information about the current repository in the prompt. If an attacker can convince a user to change their current directory to one controlled by the attacker, such as in a shared filesystem or extracted archive, powerline-gitstatus will run arbitrary commands under the attacker's control. NOTE: this is similar to CVE-2022-20001. |
2022-10-13 |
7.8 |
CVE-2022-42906 MISC MISC |
| progress -- whatsup_gold |
In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser. |
2022-10-12 |
9.6 |
CVE-2022-42711 MISC MISC MISC |
| puppet -- puppetlabs-mysql |
Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise. |
2022-10-07 |
9.8 |
CVE-2022-3275 MISC |
| puppet -- puppetlabs-mysql |
Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise. |
2022-10-07 |
8.8 |
CVE-2022-3276 MISC |
| redirection-for-contact-form7 -- redirection_for_contact_form_7 |
Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML. Requires an additional extension (plugin) AccessiBe. |
2022-10-11 |
7.5 |
CVE-2021-36913 CONFIRM CONFIRM |
| ree6 -- ree6 |
Ree6 is a moderation bot. This vulnerability allows manipulation of SQL queries. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds. |
2022-10-13 |
9.8 |
CVE-2022-39303 MISC CONFIRM |
| resiot -- iot_platform_and_lorawan_network_server |
Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 allows attackers to add new admin users to the platform or other unspecified impacts. |
2022-10-13 |
8.8 |
CVE-2022-34020 MISC MISC |
| rpcms -- rpcms |
RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator account. |
2022-10-13 |
8.8 |
CVE-2022-41475 MISC |
| samsung -- dynamic_lockscreen |
Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api. |
2022-10-07 |
9.8 |
CVE-2022-39862 MISC |
| samsung -- smartthings |
Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive information via implicit intent. |
2022-10-07 |
7.5 |
CVE-2022-39864 MISC |
| samsung -- smartthings |
Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast. |
2022-10-07 |
7.5 |
CVE-2022-39865 MISC |
| samsung -- smartthings |
Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast. |
2022-10-07 |
7.5 |
CVE-2022-39866 MISC |
| samsung -- smartthings |
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOW_PERSISTENT_BANNER broadcast. |
2022-10-07 |
7.5 |
CVE-2022-39867 MISC |
| samsung -- smartthings |
Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast. |
2022-10-07 |
7.5 |
CVE-2022-39868 MISC |
| samsung -- smartthings |
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via REMOVE_PERSISTENT_BANNER broadcast. |
2022-10-07 |
7.5 |
CVE-2022-39869 MISC |
| samsung -- smartthings |
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast. |
2022-10-07 |
7.5 |
CVE-2022-39870 MISC |
| samsung -- smartthings |
Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts. |
2022-10-07 |
7.5 |
CVE-2022-39871 MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly (.sat, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-39803 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-39804 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile (.cgm, CgmTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-39805 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (.slddrw, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-39806 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-39808 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41167 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41168 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41170 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41172 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41175 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41177 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JtTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41179 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41180 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41184 MISC MISC |
| sap -- 3d_visual_enterprise_author |
Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, MataiPersistence.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41185 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, a Remote Code Execution can be triggered when payload forces a stack-based overflow and or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41186 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41187 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application. |
2022-10-11 |
7.8 |
CVE-2022-41188 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41189 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41190 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41191 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application. |
2022-10-11 |
7.8 |
CVE-2022-41192 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script (.eps, ai.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41193 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Postscript (.eps, ai.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application. |
2022-10-11 |
7.8 |
CVE-2022-41194 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41195 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41196 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application. |
2022-10-11 |
7.8 |
CVE-2022-41197 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp, SketchUp.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41198 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File (.iv, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41199 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated Scalable Vector Graphic (.svg, svg.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41200 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary (.rh, rh.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41201 MISC MISC |
| sap -- 3d_visual_enterprise_viewer |
Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, vds.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory. |
2022-10-11 |
7.8 |
CVE-2022-41202 MISC MISC |
| sap -- business_objects_business_intelligence_platform |
Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system data and make the system unavailable leading to high impact on confidentiality and low impact on integrity and availability of the application. |
2022-10-11 |
7.6 |
CVE-2022-39013 MISC MISC |
| sap -- commerce |
An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack accounts. A successful attack could compromise the Confidentiality, Integrity, and Availability of the system. |
2022-10-11 |
8.8 |
CVE-2022-41204 MISC MISC |
| sap -- manufacturing_execution |
SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow arbitrary traversal of directories on the remote server. The file content within each directory can be read which may lead to information disclosure. |
2022-10-11 |
7.5 |
CVE-2022-39802 MISC MISC |
| sap -- sap_iq |
SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow. |
2022-10-11 |
9.8 |
CVE-2022-35299 MISC MISC |
| siemens -- 6gk6108-4am00-2ba2_firmware |
Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges. |
2022-10-11 |
8.8 |
CVE-2022-31765 MISC |
| siemens -- 7kg8500-0aa00-0aa0_firmware |
A vulnerability has been identified in SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the parameter of a specific GET request. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device. |
2022-10-11 |
8.8 |
CVE-2022-41665 MISC |
| siemens -- 7kg8500-0aa00-0aa0_firmware |
A vulnerability has been identified in SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices accept user defined session cookies and do not renew the session cookie after login/logout. This could allow an attacker to take over another user's session after login. |
2022-10-11 |
8.1 |
CVE-2022-40226 MISC |
| siemens -- desigo_pxm30-1_firmware |
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). The device embedded Chromium-based browser is launched as root with the “--no-sandbox” option. Attackers can add arbitrary JavaScript code inside “Operation” graphics and successfully exploit any number of publicly known vulnerabilities against the version of the embedded Chromium-based browser. |
2022-10-11 |
8.8 |
CVE-2022-40182 MISC |
| siemens -- desigo_pxm30-1_firmware |
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). The device embedded browser does not prevent interaction with alternative URI schemes when redirected to corresponding resources by web application code. By setting the homepage URI, the favorite URIs, or redirecting embedded browser users via JavaScript code to alternative scheme resources, a remote low privileged attacker can perform a range of attacks against the device, such as read arbitrary files on the filesystem, execute arbitrary JavaScript code in order to steal or manipulate the information on the screen, or trigger denial of service conditions. |
2022-10-11 |
8.3 |
CVE-2022-40181 MISC |
| siemens -- desigo_pxm30-1_firmware |
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). A Cross-Site Request Forgery exists in endpoints of the “Operation” web application that interpret and execute Axon language queries, due to the missing validation of anti-CSRF tokens or other origin checks. By convincing a victim to click on a malicious link or visit a specifically crafted webpage while logged-in to the device web application, a remote unauthenticated attacker can execute arbitrary Axon queries against the device. |
2022-10-11 |
8.1 |
CVE-2022-40179 MISC |
| siemens -- desigo_pxm30-1_firmware |
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). There exists an Improper Neutralization of Special Elements used in an OS Command with root privileges during a restore operation due to the missing validation of the names of files included in the input package. By restoring a specifically crafted package, a remote low-privileged attacker can execute arbitrary system commands with root privileges on the device, leading to a full compromise. |
2022-10-11 |
8 |
CVE-2022-40176 MISC |
| siemens -- industrial_edge_management |
A vulnerability has been identified in Industrial Edge Management (All versions < V1.5.1). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server. |
2022-10-11 |
7.4 |
CVE-2022-40147 MISC |
| siemens -- jt_open_toolkit |
A vulnerability has been identified in JTTK (All versions < V11.1.1.0), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The JTTK library is vulnerable to an uninitialized pointer reference vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-16973) |
2022-10-11 |
7.8 |
CVE-2022-41851 MISC |
| siemens -- logo!_8_bm_firmware |
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). Affected devices do not properly validate the structure of TCP packets in several methods. This could allow an attacker to cause buffer overflows, get control over the instruction counter and run custom code. |
2022-10-11 |
9.8 |
CVE-2022-36361 MISC |
| siemens -- logo!_8_bm_firmware |
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker to manipulate a firmware update and flash it to the device. |
2022-10-11 |
7.5 |
CVE-2022-36360 MISC |
| siemens -- logo!_8_bm_firmware |
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable and could only be recovered by power cycling the device. |
2022-10-11 |
7.5 |
CVE-2022-36362 MISC |
| siemens -- nucleus_net |
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions), Nucleus Source Code (Versions including affected FTP server). The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server. |
2022-10-11 |
7.5 |
CVE-2022-38371 MISC MISC |
| siemens -- ruggedcom_rm1224_firmware |
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (All versions < V7.1.2), SCALANCE M804PB (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (Annex A) (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (Annex B) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (Annex A) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (Annex B) (All versions < V7.1.2), SCALANCE M826-2 SHDSL-Router (All versions < V7.1.2), SCALANCE M874-2 (All versions < V7.1.2), SCALANCE M874-3 (All versions < V7.1.2), SCALANCE M876-3 (EVDO) (All versions < V7.1.2), SCALANCE M876-3 (ROK) (All versions < V7.1.2), SCALANCE M876-4 (EU) (All versions < V7.1.2), SCALANCE M876-4 (NAM) (All versions < V7.1.2), SCALANCE MUM853-1 (EU) (All versions < V7.1.2), SCALANCE MUM856-1 (EU) (All versions < V7.1.2), SCALANCE MUM856-1 (RoW) (All versions < V7.1.2), SCALANCE S615 (All versions < V7.1.2), SCALANCE WAM763-1 (All versions >= V1.1.0), SCALANCE WAM766-1 (All versions >= V1.1.0), SCALANCE WAM766-1 (All versions >= V1.1.0), SCALANCE WAM766-1 6GHz (All versions >= V1.1.0), SCALANCE WAM766-1 EEC (All versions >= V1.1.0), SCALANCE WAM766-1 EEC (All versions >= V1.1.0), SCALANCE WAM766-1 EEC 6GHz (All versions >= V1.1.0), SCALANCE WUM763-1 (All versions >= V1.1.0), SCALANCE WUM763-1 (All versions >= V1.1.0), SCALANCE WUM766-1 (All versions >= V1.1.0), SCALANCE WUM766-1 (All versions >= V1.1.0), SCALANCE WUM766-1 6GHz (All versions >= V1.1.0). Affected devices with TCP Event service enabled do not properly handle malformed packets. This could allow an unauthenticated remote attacker to cause a denial of service and reboot the device thus possibly affecting other network resources. |
2022-10-11 |
8.6 |
CVE-2022-31766 MISC |
| siemens -- simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware |
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication. |
2022-10-11 |
7.8 |
CVE-2022-38465 MISC |
| siemens -- simatic_hmi_comfort_panels_firmware |
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4), SIMATIC HMI KTP1200 Basic (All versions < V17 Update 5), SIMATIC HMI KTP400 Basic (All versions < V17 Update 5), SIMATIC HMI KTP700 Basic (All versions < V17 Update 5), SIMATIC HMI KTP900 Basic (All versions < V17 Update 5), SIPLUS HMI KTP1200 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP400 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP700 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP900 BASIC (All versions < V17 Update 5). Affected devices do not properly validate input sent to certain services over TCP. This could allow an unauthenticated remote attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets. |
2022-10-11 |
7.5 |
CVE-2022-40227 MISC |
| siemens -- solid_edge |
A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17627) |
2022-10-11 |
7.8 |
CVE-2022-37864 MISC |
| simple_cold_storage_management_system_project -- simple_cold_storage_managment_system |
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manage_user&id=. |
2022-10-11 |
7.2 |
CVE-2022-42230 MISC |
| simple_online_public_access_catalog_project -- simple_online_public_access_catalog |
A vulnerability has been found in SourceCodester Simple Online Public Access Catalog 1.0 and classified as critical. This vulnerability affects unknown code of the file /opac/Actions.php?a=login of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210784. |
2022-10-14 |
7.2 |
CVE-2022-3495 MISC MISC |
| slack_morphism_project -- slack_morphism |
Slack Morphism is a modern client library for Slack Web/Events API/Socket Mode and Block Kit. Debug logs expose sensitive URLs for Slack webhooks that contain private information. The problem is fixed in version 1.3.2 which redacts sensitive URLs for webhooks. As a workaround, people who use Slack webhooks may disable or filter debug logs. |
2022-10-10 |
7.5 |
CVE-2022-39292 CONFIRM MISC |
| sonicwall -- global_management_system |
SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files. |
2022-10-13 |
7.5 |
CVE-2021-20030 CONFIRM |
| tenda -- ac1206_firmware |
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWifiBasicSet. |
2022-10-12 |
7.5 |
CVE-2022-42079 MISC |
| tenda -- ac1206_firmware |
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter. |
2022-10-12 |
7.5 |
CVE-2022-42080 MISC |
| tenda -- ac1206_firmware |
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via sched_end_time parameter. |
2022-10-12 |
7.5 |
CVE-2022-42081 MISC |
| traefik -- traefik |
Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer that assists in deploying microservices. There is a potential vulnerability in Traefik managing HTTP/2 connections. A closing HTTP/2 server connection could hang forever because of a subsequent fatal error. This failure mode could be exploited to cause a denial of service. There has been a patch released in versions 2.8.8 and 2.9.0-rc5. There are currently no known workarounds. |
2022-10-11 |
7.5 |
CVE-2022-39271 MISC CONFIRM MISC |
| trendmicro -- apex_one |
A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installations to escalate privileges and modify certain agent groupings. Please note: an attacker must first obtain the ability to log onto the Apex One web console in order to exploit this vulnerability. |
2022-10-10 |
9.1 |
CVE-2022-41746 MISC MISC |
| trendmicro -- apex_one |
An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with system service privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. |
2022-10-10 |
7.8 |
CVE-2022-41747 MISC MISC |
| trendmicro -- apex_one |
An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. |
2022-10-10 |
7.8 |
CVE-2022-41749 MISC MISC |
| trendmicro -- apex_one |
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attacker to escalate privileges and turn a specific working directory into a mount point on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. |
2022-10-10 |
7 |
CVE-2022-41744 MISC MISC |
| trendmicro -- apex_one |
An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. |
2022-10-10 |
7 |
CVE-2022-41745 MISC MISC |
| vmware -- vcenter_server |
The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server. |
2022-10-07 |
9.1 |
CVE-2022-31680 MISC MISC |
| wayos -- lq-09_firmware |
WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usb_upload.htm. |
2022-10-13 |
8.1 |
CVE-2022-41489 MISC |
| web-based_student_clearance_system_project -- web-based_student_clearance_system |
A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210367. |
2022-10-09 |
7.5 |
CVE-2022-3436 MISC |
| webpack.js -- loader-utils |
Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils 2.0.0 via the name variable in parseQuery.js. |
2022-10-12 |
9.8 |
CVE-2022-37601 MISC MISC MISC |
| webpack.js -- loader-utils |
A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js. |
2022-10-11 |
7.5 |
CVE-2022-37599 MISC MISC MISC |
| wedding_planner_project -- wedding_planner |
Wedding Planner v1.0 is vulnerable to arbitrary code execution. |
2022-10-07 |
9.8 |
CVE-2022-42075 MISC MISC |
| wedding_planner_project -- wedding_planner |
Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php. |
2022-10-11 |
8.8 |
CVE-2022-42034 MISC |
| wedding_planner_project -- wedding_planner |
Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php. |
2022-10-11 |
8.8 |
CVE-2022-42229 MISC |
| wijungle -- u250_firmware |
WiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the attacker to brute force the admin password leading to Account Take Over. |
2022-10-12 |
9.8 |
CVE-2022-33106 MISC MISC |
| woo_billingo_plus_project -- woo_billingo_plus |
The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, which could allow attackers to make logged in Shop Managers and above perform unwanted actions, such as deactivate the plugin's license |
2022-10-10 |
7.1 |
CVE-2022-3154 MISC |
| xmldom_project -- xmldom |
A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. |
2022-10-11 |
9.8 |
CVE-2022-37616 MISC MISC MISC MISC |
| zkteco -- zkbiosecurity_v5000 |
An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request. |
2022-10-07 |
8.8 |
CVE-2022-36634 MISC MISC MISC |
| zkteco -- zkbiosecurity_v5000 |
ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do. |
2022-10-07 |
8.8 |
CVE-2022-36635 MISC MISC MISC |
| zoneminder -- zoneminder |
ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs without System Privileges. Users are advised yo upgrade as soon as possible. Users unable to upgrade should disable database logging. |
2022-10-07 |
7.5 |
CVE-2022-39289 MISC CONFIRM |
