CVE-2022-38341

Safe Software FME Server v2021.2.5 and below does not employ server-side validation...

PT-2022-37342 · Unknown +1 · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-math version 0.1.0 Description: The d8s-math library for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-strings package, which was inserted by a third party. Recommendations: For version...

The vulnerability of the gd_gd2.c component of the LibGD graphics library allows a hacker to cause a service failure.

The vulnerability of the gdgd2.c component of the LibGD graphics library is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the tif_unix.c component in the LibTIFF library allows a hacker to cause a service failure.

The vulnerability of the tifunix.c component in the LibTIFF library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2022-37959

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37958

SPNEGO Extended Negotiation NEGOEX Security Mechanism Remote Code Execution Vulnerability...

CVE-2022-37963

Microsoft Office Visio Remote Code Execution Vulnerability...

CVE-2022-38020

Visual Studio Code Elevation of Privilege Vulnerability...

CVE-2022-35830

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-33679

Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2022-39846

DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...

The vulnerability of the libIEC61850 library, related to reading data outside the buffer in memory, allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the libIEC61850 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the libIEC61850 library, related to access to resources through incompatible types, allows a perpetrator to cause a service failure.

The vulnerability of the libIEC61850 library is related to access to resources through incompatible types. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the libIEC61850 library, related to pointer assignment errors, allows a perpetrator to cause a service failure.

The vulnerability of the libIEC61850 library is related to errors in pointer assignment. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the libIEC61850 library, related to reading data outside the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the libIEC61850 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2022-4741 · Mz Automation +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: MZ Automation's libIEC61850 versions 1.4 and prior MZ Automation's libIEC61850 version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e Description: The issue is related to accessing a resource using an incompatible type, which...

DEBIAN-CVE-2022-27664

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error...

USN-5216-1 node-hosted-git-info vulnerability

It was discovered that hosted-git-info incorrectly handled certain inputs. A remote attacker could use this to cause a denial of service...

AZL-10864 CVE-2022-1615 affecting package samba 4.12.5-7

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-39046

An issue was discovered in the GNU C Library glibc 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap...