3347 matches found
CVE-2022-46325
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions...
CVE-2022-44695
Microsoft Office Visio Remote Code Execution Vulnerability...
CVE-2022-44710
DirectX Graphics Kernel Elevation of Privilege Vulnerability...
CVE-2022-44707
Windows Kernel Denial of Service Vulnerability...
CVE-2022-44668
Windows Media Remote Code Execution Vulnerability...
CVE-2022-41089
.NET Framework Remote Code Execution Vulnerability...
CVE-2022-44669
Windows Error Reporting Elevation of Privilege Vulnerability...
CVE-2022-3853
Cross-site Scripting XSS is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application...
Denial Of Service (DoS)
chromium is vulnerable to denial of service. The vulnerability exists due to the heap buffer overflow in GPU in the library, allowing an attacker to perform a sandbox escape via a crafted HTML page, leading to an application crash...
CVE-2022-39906
Improper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows attackers to access message information...
CVE-2022-2827
AMI MegaRAC User Enumeration Vulnerability...
USN-5762-1 binutils vulnerability
It was discovered that GNU binutils incorrectly handled certain COFF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...
USN-5743-2 tiff vulnerability
USN-5743-1 fixed a vulnerability in LibTIFF. This update provides the corresponding updates for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. Original advisory details: It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated...
GHSA-W573-4HG7-7WGQ decode-uri-component vulnerable to Denial of Service (DoS)
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS...
CVE-2022-41912 crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements
The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading to a fixed version...
Leak in Aliyun KeySecret
Users of this library will be affected when using this library, the incoming secret will be disclosed unintentionally...
Improper Input Validation
Overview cgi is a Support for the Common Gateway Interface protocol. Affected versions of this package are vulnerable to Improper Input Validation due to improper validation of CGI::Cookie content, which allows an attacker to inject invalid attributes in the Set-Cookie header and insert a newline...
CVE-2022-34827
Carel Boss Mini 1.5.0 has Improper Access Control...