Lucene search
+L

7979 matches found

OSV
OSV
added 2022/10/14 7:15 p.m.8 views

CVE-2022-38697

In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privileges needed...

5.5CVSS5.9AI score0.00129EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/14 12:00 a.m.29 views

CVE-2022-38697

In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privileges needed...

5.8AI score0.00129EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/10/14 12:00 a.m.14 views

PT-2022-24532 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: messaging service affected versions not specified Description: The issue is related to a missing permission check in the messaging service. This could allow access to an unexpected provider in the contacts service without requiring any...

5.5CVSS5.2AI score0.00129EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/10/14 12:00 a.m.9 views

CVE-2022-38697

In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privileges needed...

5.5AI score0.00129EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/12 9:15 p.m.40 views

CVE-2022-39299

Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML elemen...

8.1CVSS0.03381EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/10/12 12:00 a.m.21 views

PT-2022-24883 · Unknown +1 · Passport-Saml +1

Name of the Vulnerable Software and Affected Versions: node-saml versions prior to 4.0.0-beta5 Description: A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML...

8.1CVSS8.2AI score0.0065EPSS
SaveExploits0References7
NVD
NVD
added 2022/10/11 8:15 p.m.23 views

CVE-2022-20439

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172...

5.5CVSS0.00116EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/10/11 8:15 p.m.13 views

CVE-2022-20439

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172...

5.5CVSS6AI score0.00116EPSS
SaveExploits0References2
Prion
Prion
added 2022/10/11 8:15 p.m.20 views

Design/Logic Flaw

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172...

1.7CVSS5.5AI score0.00116EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/11 7:15 p.m.7 views

CVE-2022-38043

Windows Security Support Provider Interface Information Disclosure Vulnerability...

5.5CVSS5.8AI score0.00584EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/11 7:15 p.m.5 views

CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01609EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/11 7:15 p.m.25 views

CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS0.01609EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/11 7:15 p.m.6 views

CVE-2022-37982

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.5AI score0.01609EPSS
SaveExploits0References3Affected Software25
ATTACKERKB
ATTACKERKB
added 2022/10/11 7:15 p.m.5 views

CVE-2022-38043

Windows Security Support Provider Interface Information Disclosure Vulnerability...

5.5CVSS6.3AI score0.00584EPSS
SaveExploits0References3Affected Software22
Prion
Prion
added 2022/10/11 7:15 p.m.24 views

Remote code execution

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

6.8CVSS8.8AI score0.01609EPSS
SaveExploits0References1Affected Software5
Prion
Prion
added 2022/10/11 7:15 p.m.28 views

Information disclosure

Windows Security Support Provider Interface Information Disclosure Vulnerability...

1.7CVSS6.4AI score0.00584EPSS
SaveExploits0References1Affected Software5
OSV
OSV
added 2022/10/11 3:15 p.m.7 views

ALPINE-CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS6.9AI score0.03087EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/11 3:15 p.m.8 views

DEBIAN-CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS7.4AI score0.03087EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/11 3:15 p.m.32 views

CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS0.03087EPSS
SaveExploits0References5
OSV
OSV
added 2022/10/11 3:15 p.m.8 views

UBUNTU-CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS6.7AI score0.03087EPSS
SaveExploits0References4
Rows per page
Query Builder