CVE-2022-38341

Safe Software FME Server v2021.2.5 and below does not employ server-side validation...

PT-2022-37342 · Unknown +1 · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-math version 0.1.0 Description: The d8s-math library for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-strings package, which was inserted by a third party. Recommendations: For version...

The vulnerability of the gd_gd2.c component of the LibGD graphics library allows a hacker to cause a service failure.

The vulnerability of the gdgd2.c component of the LibGD graphics library is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the tif_unix.c component in the LibTIFF library allows a hacker to cause a service failure.

The vulnerability of the tifunix.c component in the LibTIFF library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2022-37959

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37963

Microsoft Office Visio Remote Code Execution Vulnerability...

CVE-2022-38020

Visual Studio Code Elevation of Privilege Vulnerability...

CVE-2022-37958

SPNEGO Extended Negotiation NEGOEX Security Mechanism Remote Code Execution Vulnerability...

CVE-2022-35830

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-33679

Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2022-39846

DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...

The vulnerability of the libIEC61850 library, related to pointer assignment errors, allows a perpetrator to cause a service failure.

The vulnerability of the libIEC61850 library is related to errors in pointer assignment. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the libIEC61850 library, related to access to resources through incompatible types, allows a perpetrator to cause a service failure.

The vulnerability of the libIEC61850 library is related to access to resources through incompatible types. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the libIEC61850 library, related to reading data outside the buffer in memory, allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the libIEC61850 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the libIEC61850 library, related to reading data outside the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the libIEC61850 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2022-4741 · Mz Automation +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: MZ Automation's libIEC61850 versions 1.4 and prior MZ Automation's libIEC61850 version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e Description: The issue is related to accessing a resource using an incompatible type, which...

DEBIAN-CVE-2022-27664

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error...

USN-5216-1 node-hosted-git-info vulnerability

It was discovered that hosted-git-info incorrectly handled certain inputs. A remote attacker could use this to cause a denial of service...

AZL-10864 CVE-2022-1615 affecting package samba 4.12.5-7

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-39046

An issue was discovered in the GNU C Library glibc 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap...