3365 matches found
CVE-2022-35769
Windows Point-to-Point Protocol PPP Denial of Service Vulnerability...
CVE-2022-35775
Azure Site Recovery Elevation of Privilege Vulnerability...
CVE-2022-35765
Storage Spaces Direct Elevation of Privilege Vulnerability...
CVE-2022-34707
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2022-34704
Windows Defender Credential Guard Information Disclosure Vulnerability...
CVE-2022-33649
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2022-33636
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2022-34696
Windows Hyper-V Remote Code Execution Vulnerability...
CVE-2022-33646
Azure Batch Node Agent Elevation of Privilege Vulnerability...
CVE-2022-24516
Microsoft Exchange Server Elevation of Privilege Vulnerability...
CVE-2022-30194
Windows WebBrowser Control Remote Code Execution Vulnerability...
GHSA-5VRC-7JFR-4642 monorepo-build Command Injection vulnerability
A command injection vulnerability affects all versions of package monorepo-build...
Code injection
When compressing or decompressing a point on the NIST P-256 elliptic curve with an X coordinate of zero, the resulting output is not properly reduced modulo the P-256 field prime and is invalid. The resulting output will cause an error when used in other operations. This may be leveraged by an...
Western Digital Sweet B 安全漏洞
Western Digital Sweet B is a library from Western Digital, Inc. that implements public-key elliptic curve cryptography ECC using NIST P-256 and SECG secp256k1 curves. A security vulnerability exists in the Western Digital Sweet B library, which could be exploited by an attacker to cause a limited...
OpenJDK: random exponentials issue (Libraries, 8283875)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated...
CVE-2021-42535
VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage...
CVE-2022-34551
Sims v1.0 was discovered to allow path traversal when downloading attachments...
@arnau/gatsby-transformer-toml (>=1.0.0 <=1.0.2) potentially affected by CVE-2020-28462 via ion-parser (=0.5.2)
ion-parser NPM version =0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ion-parser and may be impacted: - @arnau/gatsby-transformer-toml =1.0.0, =1.0.2 Source cves: CVE-2020-28462 Source advisory: OSV:GHSA-7VRV-5M2H-RJW9...
GHSA-PC62-CQ5X-3J5G node-import `params` argument can be controlled by users without any sanitization
This affects all versions of package node-import. The params argument of module function can be controlled by users without any sanitization. This is then provided to the “eval” function located in line 79 in the index file index.js...