3353 matches found
CVE-2022-23252
Microsoft Office Information Disclosure Vulnerability...
CVE-2022-22715
Named Pipe File System Elevation of Privilege Vulnerability...
CVE-2022-22709
VP9 Video Extensions Remote Code Execution Vulnerability...
CVE-2022-21974
Roaming Security Rights Management Services Remote Code Execution Vulnerability...
CVE-2022-21971
Windows Runtime Remote Code Execution Vulnerability...
log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender
A flaw was found in the Java logging library Apache Log4j in version 1.x. JMSAppender in Log4j 1.x is vulnerable to deserialization of untrusted data. This allows a remote attacker to execute code on the server if the deployed application is configured to use JMSAppender and to the attacker's JND...
CVE-2022-23263
Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...
CVE-2022-23261
Microsoft Edge Chromium-based Tampering Vulnerability...
UBUNTU-CVE-2021-38172
perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...
The vulnerability of the PIL.ImageMath.eval component in the Python Pillow image processing library, which is related to the use of dangerous methods or functions, allows attackers to execute arbitrary code.
The vulnerability of the PIL.ImageMath.eval function in the Python Pillow library is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the system by sending a specially crafted file to the vulnerable library...
log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender
A flaw was found in the Java logging library Apache Log4j in version 1.x. JDBCAppender in Log4j 1.x is vulnerable to SQL injection in untrusted data. This allows a remote attacker to run SQL statements in the database if the deployed application is configured to use JDBCAppender with certain...
UBUNTU-CVE-2022-0392
Heap-based Buffer Overflow in GitHub repository vim prior to 8.2...
CVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
UBUNTU-CVE-2022-0361
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability...
CVE-2021-45380
AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inchead.php...
Improper Authentication
Overview cgi is a Support for the Common Gateway Interface protocol. Affected versions of this package are vulnerable to Improper Authentication. CGI::Cookie.parse mishandles security prefixes in cookie names by applying URL decoding to cookie names. An attacker could exploit this vulnerability t...
UBUNTU-CVE-2021-46240
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfdumpvrmlsffield at scenemanager/scenedump.c. This vulnerability can lead to a Denial of Service DoS...