@chumager/itdfw-site-base (>=1.2.0, <=2.4.5), @citruslime/ui (>=1.0.0, <=1.1.4-beta.1) +9 more potentially affected by CVE-2022-23461 via jodit (>=3.4.14, <=3.23.3)

jodit NPM version =3.4.14, =1.2.0, =1.0.0, =28.0.0-staging-2b964a, =1.0.9, =2.2.3, =1.0.15, =1.0.0, =1.5.1, =1.4.58, =1.6.90 Source cves: CVE-2022-23461 Source advisory: OSV:GHSA-42HX-VRXX-5R6V...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Watson Explorer and Watson Explorer Content Analytics Studio (CVE-2022-21496, CVE-2022-21299)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-21496...

[R1] Nessus Network Monitor 6.1.0 Fixes Multiple Third-party Vulnerabilities

R1 Nessus Network Monitor 6.1.0 Fixes Multiple Third-party Vulnerabilities Arnie Cabral Tue, 09/20/2022 - 13:14 Nessus Network Monitor leverages third-party software to help provide underlying functionality. Several third-party components OpenSSL and moment.js were found to contain vulnerabilitie...

CVE-2022-39003

Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components...

CVE-2022-39003

Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components...

CVE-2022-39003

Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components...

Buffer overflow

Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components...

@budibase/client (>=0.0.999-alpha.30, <=1.3.19-alpha.7), @budibase/frontend-core (>=0.0.1, <=1.3.19-alpha.7) +4 more potentially affected by CVE-2022-3225 via @budibase/bbui (>=0.0.1, <=1.3.19-alpha.7)

@budibase/bbui NPM version =0.0.1, =0.0.999-alpha.30, =0.0.1, =0.0.999-alpha.30, =0.9.1, =0.9.123, =0.9.124 - @operabuild/standard-components 0.9.124 Source cves: CVE-2022-3225 Source advisory: MEND:CVE-2022-3225...

CVE-2022-25696

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25656

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

components-store.my Cross Site Scripting vulnerability OBB-2922930

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

components-store.jp Cross Site Scripting vulnerability OBB-2922927

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

components-store.kr Cross Site Scripting vulnerability OBB-2922928

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

components-store.com Cross Site Scripting vulnerability OBB-2922925

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

components-mart.jp Cross Site Scripting vulnerability OBB-2922921

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-7413

Name of the Vulnerable Software and Affected Versions Mplayer versions SVN-r38374-13.0.1 Description The issue is related to a memory leak in the Mplayer media player, specifically in the files vf.c and vf vo.c, due to the lack of memory release after its effective term of service. Exploitation o...

mysql: Server: Components Services unspecified vulnerability (CPU Jan 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

[SECURITY] Fedora 35 Update: qt5-qtwebengine-5.15.10-1.fc35

Qt5 - QtWebEngine components...

RHEL 7 : rh-mysql80-mysql (RHSA-2022:6518)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6518 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The...

CVE-2022-32190 Failure to strip relative path components in net/url

JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath"https://go.dev", "../go" returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from the result...