CVE-2022-35791

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-35784

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-35769

Windows Point-to-Point Protocol PPP Denial of Service Vulnerability...

CVE-2022-35775

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-35765

Storage Spaces Direct Elevation of Privilege Vulnerability...

CVE-2022-34707

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2022-34704

Windows Defender Credential Guard Information Disclosure Vulnerability...

CVE-2022-33649

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2022-33636

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2022-33646

Azure Batch Node Agent Elevation of Privilege Vulnerability...

CVE-2022-34696

Windows Hyper-V Remote Code Execution Vulnerability...

CVE-2022-24516

Microsoft Exchange Server Elevation of Privilege Vulnerability...

CVE-2022-30194

Windows WebBrowser Control Remote Code Execution Vulnerability...

GHSA-5VRC-7JFR-4642 monorepo-build Command Injection vulnerability

A command injection vulnerability affects all versions of package monorepo-build...

Code injection

When compressing or decompressing a point on the NIST P-256 elliptic curve with an X coordinate of zero, the resulting output is not properly reduced modulo the P-256 field prime and is invalid. The resulting output will cause an error when used in other operations. This may be leveraged by an...

Western Digital Sweet B 安全漏洞

Western Digital Sweet B is a library from Western Digital, Inc. that implements public-key elliptic curve cryptography ECC using NIST P-256 and SECG secp256k1 curves. A security vulnerability exists in the Western Digital Sweet B library, which could be exploited by an attacker to cause a limited...

OpenJDK: random exponentials issue (Libraries, 8283875)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated...

CVE-2021-42535

VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage...

CVE-2022-34551

Sims v1.0 was discovered to allow path traversal when downloading attachments...

@arnau/gatsby-transformer-toml (>=1.0.0 <=1.0.2) potentially affected by CVE-2020-28462 via ion-parser (=0.5.2)

ion-parser NPM version =0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ion-parser and may be impacted: - @arnau/gatsby-transformer-toml =1.0.0, =1.0.2 Source cves: CVE-2020-28462 Source advisory: OSV:GHSA-7VRV-5M2H-RJW9...