3431 matches found
CVE-2022-31943
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-25900
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...
CVE-2022-25876
The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery SSRF which allows attackers to send arbitrary requests to the local network and read the response. This is due to flawed DNS rebinding protection...
CVE-2022-30192
Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...
The vulnerability of the `fuse_lib_readdir` function in the `libfuse-lite` library of the NTFS file system, which allows a attacker to execute arbitrary code with elevated privileges on the FUSE NTFS-3G module.
The vulnerability of the fuselibreaddir function in the libfuse-lite library of the NTFS file system for the FUSE NTFS-3G module is related to a numerical value loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a...
UBUNTU-CVE-2022-2207
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
CVE-2022-1521
LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or intercept sensitive data...
AZL-45402 CVE-2022-29526 affecting package delve 1.5.0-16
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...
AZL-35039 CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...
USN-5490-1 protobuf vulnerability
It was discovered that Protocol Buffers did not properly parse certain symbols. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service interruptions remotely...
a2 (>=0.2.0, <=0.3.6), abc (>=0.1.0, <=0.2.3) +502 more potentially affected by unknown CVE via crossbeam (>=0.1.6, <=0.6.0)
crossbeam CARGO version =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8GJ8-HV75-GP94...
CVE-2022-30159
Microsoft Office Information Disclosure Vulnerability...
CVE-2022-30151
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...
CVE-2022-30168
Microsoft Photos App Remote Code Execution Vulnerability...
CVE-2022-30136
Windows Network File System Remote Code Execution Vulnerability...
CVE-2022-30135
Windows Media Center Elevation of Privilege Vulnerability...
CVE-2022-22018
HEVC Video Extensions Remote Code Execution Vulnerability...