CVE-2022-38419 Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction...

CVE-2022-35711 Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is...

CVE-2022-38418 Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does...

CVE-2022-35690 Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution Vulnerability

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is...

CVE-2022-35710 Adobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution Vulnerability

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is...

CVE-2022-35712

CVE-2022-35712 is a heap-based buffer overflow affecting Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier). The vulnerability can lead to arbitrary code execution in the context of the current user and is triggered by a crafted network packet sent to the server, with no...

CVE-2022-35712 Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is...

CVE-2022-38418

CVE-2022-38418 affects Adobe ColdFusion versions Update 14 and earlier, and Update 4 and earlier. The issue is an improper limitation of a pathname to a restricted directory (path traversal) that could allow arbitrary code execution in the context of the current user. Exploitation does not requir...

AZL-45162 CVE-2022-32149 affecting package containernetworking-plugins for versions less than 1.6.1-4

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

[SECURITY] Fedora 36 Update: dhcp-4.4.3-4.P1.fc36

DHCP Dynamic Host Configuration Protocol...

AZL-45309 CVE-2022-37602 affecting package js-jquery 3.5.0-4

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

CVE-2022-38418: Improper Limitation of a Pathname to a Restricted Directory

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does...

Command injection

Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configuration overwrites menu. RCE can be implemented by closing the single quotation marks around the parameter value of “-- conf=” to inject any operating system command into the comma...

CVE-2022-31766

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions = V1.1.0 V3.0.0,...

Apple Security Update: watchOS 9.0.2

Apple recommends to install security update watchOS 9.0.2 on devices Apple Watch Series 4 and later...

CVE-2022-1198 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-1198 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2021-33655 affecting package kernel for versions less than 5.15.67.1-4

CVE-2021-33655 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-33743 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-33743 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-1651 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-1651 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-40476 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-40476 affecting package kernel for versions less than 5.15.67.1-4. An upgraded version of the package is available that resolves this issue...