The vulnerability of the MPEG-2 Video Extension codec, related to improper control of the encoding process, allows a perpetrator to execute arbitrary code.

The vulnerability of the MPEG-2 Video Extension codec is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting

Cross-site scripting XSS vulnerability in the Static Methods since 2007 div2007 extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3libdiv::quoteJSvalue function...

The vulnerability of the extension of the software tool for implementing the hypertext environment MediaWiki allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the extension of the software tool for implementing the hypertext environment MediaWiki relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

The vulnerability of the `iconv_mime_decode_headers` function within the `Iconv` extension of the PHP language allows attackers to trigger incomplete output arrays, bypass spam protection mechanisms, or otherwise affect the system.

The vulnerability of the iconvmimedecodeheaders function in the Iconv extension of the PHP language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause incomplete output arrays, bypass spam protection mechanisms, or otherwise affect the system b...

The vulnerability of the PHP interpreter is related to an error in processing paths to files containing the character \x00. This error allows attackers to gain unauthorized access to files or directories.

The vulnerability of the PHP interpreter extension is related to an error in processing paths to files containing the character \x00. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to files or directories...

The vulnerability of the ext/session/session.c component in the PHP programming language allows a attacker to cause a service failure or potentially cause other effects.

The vulnerability of the ext/session/session.c component of the PHP programming language interpreter is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or potentially cause other adverse effects...

CVE-2022-1258

A blind SQL injection vulnerability in the ePolicy Orchestrator ePO extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server...

CVE-2022-28795

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...

CVE-2022-0793

Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension...

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...

Open redirect

The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool...

Default credentials

Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compromises...

The vulnerability of the Windows IKE extension in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows IKE extension in operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-22709

VP9 Video Extensions Remote Code Execution Vulnerability...

CVE-2022-24071

A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs...

PT-2022-11319 · Mcafee · Data Loss Protection (Dlp) Epo Extension

Name of the Vulnerable Software and Affected Versions: Data Loss Protection DLP ePO extension versions 11.6.401 through 11.7.100 Data Loss Protection DLP ePO extension versions 11.8.x prior to 11.8.100 Description: A SQL injection vulnerability in the DLP ePO extension allows a remote authenticat...

CVE-2022-21890

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

CVE-2022-21889

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

CVE-2022-21848

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

PT-2022-1494 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the incorrect clearing or release of resources in the Windows IKE extension, which can lead to a denial-of-service condition. This can be exploited by a remote...