1378 matches found
DEBIAN-CVE-2022-4436
Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2022-4436
Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Amazon Linux 2 : kernel (ALAS-2022-1903)
The version of kernel installed on the remote host is prior to 4.14.301-224.520. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1903 advisory. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is...
PT-2022-25789 · Siemens · Jt2Go +1
Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 14.1.0.6 Teamcenter Visualization V13.2 versions prior to 13.2.0.12 Teamcenter Visualization V13.3 versions prior to 13.3.0.8 Teamcenter Visualization V14.0 versions prior to 14.0.0.4 Teamcenter Visualization V14.1...
CVE-2022-4398
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...
UBUNTU-CVE-2022-4195
Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. Chromium security severity: Medium...
CVE-2022-43447
SQL Injection in AMEBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...
PT-2022-35768 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A kernel NULL pointer dereference error was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.19.262,...
PT-2022-35587 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.148 Description: A potential security issue exists in the wifi cfg80211/mac80211 component, where bad MBSSID elements are not properly rejected. The actual impact and attack plausibility of this issue have...
PT-2022-17687 · Intel · Intel Nuc 8 Rugged Kits +3
Name of the Vulnerable Software and Affected Versions: IntelR NUC Boards versions prior to CHAPLCEL.0059 IntelR NUC 8 Boards versions prior to CHAPLCEL.0059 IntelR NUC 8 Rugged Boards versions prior to CHAPLCEL.0059 IntelR NUC 8 Rugged Kits versions prior to CHAPLCEL.0059 Description: The issue i...
PT-2022-21941 · Intel · Intel Wapi Security
Name of the Vulnerable Software and Affected Versions: IntelR WAPI Security software for Windows 10/11 versions prior to 22.2150.0.1 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-26088
An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to inject HTML such as an SSRF payload into the Activity Log by placing it in the To: field. This affects rendering that occurs upon a click in the "number of recipients" field...
PT-2022-26444 · WordPress · Traffic Manager
Name of the Vulnerable Software and Affected Versions: Traffic Manager plugin versions prior to 1.4.6 Description: The issue is related to a Broken Access Control vulnerability that leads to Stored Cross-Site Scripting XSS in the Traffic Manager plugin on WordPress. Recommendations: For Traffic...
PT-2022-23878 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: Froxlor versions prior to 0.10.39 Description: The issue concerns a Code Injection problem. It is reported that Froxlor is vulnerable to this issue. Recommendations: For versions prior to 0.10.39, update to version 0.10.39 or later to resolve...
PT-2022-24674 · Pdftron Systems +1 · Pdftron +1
Name of the Vulnerable Software and Affected Versions: M-Files Hubshare versions prior to 3.3.11.3 Description: The issue concerns broken access controls on PDFtron data, allowing unauthenticated attackers to access restricted PDF files via a known URL. Recommendations: For versions prior to...
WordPress plugin WP Humans.txt 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-39866
Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...
DEBIAN-CVE-2022-3051
Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions...
Knot Resolver 资源管理错误漏洞
Knot Resolver is a cached DNS resolver implementation that includes a resolver library and daemon. A denial of service vulnerability exists in NIC Knot Resolver versions prior to 5.5.3. The vulnerability stems from not properly handling incoming error messages and can be exploited by a remote...