3346 matches found
CVE-2022-30151
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...
CVE-2022-30168
Microsoft Photos App Remote Code Execution Vulnerability...
CVE-2022-30136
Windows Network File System Remote Code Execution Vulnerability...
CVE-2022-30135
Windows Media Center Elevation of Privilege Vulnerability...
CVE-2022-22018
HEVC Video Extensions Remote Code Execution Vulnerability...
CVE-2022-32380
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getstudentsubject.php?index=...
CVE-2021-40727
Access of Memory Location After End of Buffer CWE-788...
CVE-2021-42732
Access of Memory Location After End of Buffer CWE-788...
CVE-2022-23169
attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel...
CVE-2022-31762
The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation...
Drupal Releases Security Updates
Drupal has released security updates to address a Guzzle third-party library vulnerability that does not affect Drupal core but may affect some contributed projects or custom code on Drupal sites. Exploitation of this vulnerability could allow a remote attacker to take control of an affected...
CVE-2022-30713
Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...
CVE-2022-27184
The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code...
CVE-2022-30127
Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...
USN-5456-1 imagemagick vulnerability
It was discovered that ImageMagick incorrectly handled memory under certain circumstances. If a user were tricked into opening a specially crafted image, an attacker could possibly exploit this issue to cause a denial of service or other unspecified impact...
Denial of Service (DoS)
Overview github.com/containrrr/shoutrrr/pkg/util is a notification library for gophers. Affected versions of this package are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters...
Privilege Escalation
needrestart is vulnerable to privilege escalation. The vulnerability exists when the library tries to detect if interpreters are using old source files...
DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash
A flaw was found in the vhost library in DPDK. Function vhostusersetinflightfd does not validate msg-payload.inflight.numqueues, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability...
CVE-2022-26757
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges...