279 matches found
CVE-2022-4122
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...
CVE-2022-28607
An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...
CVE-2022-41944 Discourse users can see notifications for topics they no longer have access to
Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions prior to 2.9.0.beta.13, under certain conditions, a user can see notifications for topics they no longer have access to. If there is sensitive information in the topic title, it...
SUSE-SU-2022:4209-1 Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2022-36227: Fixed potential NULL pointer dereference in archivewriteallocatefilter bsc1205629...
CVE-2022-43782
creationtimestamp| type| source ---|---|--- 2022-11-19 05:38:09+00:00| seen| https://t.me/thehackernews/2779 2022-11-19 09:31:36+00:00| seen| https://t.me/cKure/10449 2022-11-19 15:36:37+00:00| seen| https://t.me/itsecnews/1806 2022-11-21 08:43:48+00:00| seen| https://t.me/truesecator/3727...
CVE-2022-41889
creationtimestamp| type| source ---|---|--- 2022-11-19 00:29:34+00:00| published-proof-of-concept| https://t.me/cibsecurity/53176...
CVE-2022-2720
creationtimestamp| type| source ---|---|--- 2022-10-12 12:40:50+00:00| seen| https://t.me/cibsecurity/51256...
CVE-2022-41194
creationtimestamp| type| source ---|---|--- 2022-10-12 00:26:18+00:00| seen| https://t.me/cibsecurity/51195...
CVE-2022-39238
creationtimestamp| type| source ---|---|--- 2022-09-23 12:13:17+00:00| seen| https://t.me/cibsecurity/50311...
CVE-2022-35029
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea...
CVE-2022-29023
creationtimestamp| type| source ---|---|--- 2022-09-17 13:27:13+00:00| seen| https://t.me/CyberSecurityTechnologies/6816...
CVE-2022-40621
creationtimestamp| type| source ---|---|--- 2022-09-14 00:25:53+00:00| seen| https://t.me/cibsecurity/49729...
CVE-2022-36594
creationtimestamp| type| source ---|---|--- 2022-09-02 07:38:47+00:00| seen| https://t.me/cibsecurity/49222...
CVE-2022-36008 Message length overflow in frontier
Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause ...
CVE-2022-21148
Improper access control in the IntelR Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-35603
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt...
CVE-2022-2693
creationtimestamp| type| source ---|---|--- 2022-08-06 22:21:55+00:00| seen| https://t.me/cibsecurity/47703...
CVE-2022-24024
creationtimestamp| type| source ---|---|--- 2022-08-06 02:21:03+00:00| seen| https://t.me/cibsecurity/47663...
CVE-2022-35915
creationtimestamp| type| source ---|---|--- 2022-08-02 00:17:32+00:00| seen| https://t.me/cibsecurity/47387...
CVE-2022-31173 Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow
Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually...