Lucene search
+L

7546 matches found

Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.10 views

PT-2022-24532 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: messaging service affected versions not specified Description: The issue is related to a missing permission check in the messaging service. This could allow access to an unexpected provider in the contacts service without requiring any...

5.5CVSS5.2AI score0.00129EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/10/14 12:0 a.m.7 views

CVE-2022-38697

In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privileges needed...

5.5AI score0.00129EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/12 9:15 p.m.37 views

CVE-2022-39299

Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML elemen...

8.1CVSS0.03111EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/10/12 12:0 a.m.17 views

PT-2022-24883 · Unknown +1 · Passport-Saml +1

Name of the Vulnerable Software and Affected Versions: node-saml versions prior to 4.0.0-beta5 Description: A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML...

8.1CVSS8.2AI score0.00626EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2022/10/11 8:15 p.m.9 views

CVE-2022-20439

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172...

5.5CVSS6AI score0.00116EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/11 8:15 p.m.21 views

CVE-2022-20439

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172...

5.5CVSS0.00116EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/11 8:15 p.m.17 views

Design/Logic Flaw

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172...

1.7CVSS5.5AI score0.00116EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/11 7:15 p.m.5 views

CVE-2022-38043

Windows Security Support Provider Interface Information Disclosure Vulnerability...

5.5CVSS5.8AI score0.00563EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/11 7:15 p.m.3 views

CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01516EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/11 7:15 p.m.24 views

CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS0.01516EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/11 7:15 p.m.5 views

CVE-2022-37982

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

8.8CVSS7.5AI score0.01516EPSS
SaveExploits0References3Affected Software25
ATTACKERKB
ATTACKERKB
added 2022/10/11 7:15 p.m.3 views

CVE-2022-38043

Windows Security Support Provider Interface Information Disclosure Vulnerability...

5.5CVSS6.3AI score0.00563EPSS
SaveExploits0References3Affected Software22
Prion
Prion
added 2022/10/11 7:15 p.m.23 views

Remote code execution

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

6.8CVSS8.8AI score0.01516EPSS
SaveExploits0References1Affected Software5
Prion
Prion
added 2022/10/11 7:15 p.m.26 views

Information disclosure

Windows Security Support Provider Interface Information Disclosure Vulnerability...

1.7CVSS6.4AI score0.00563EPSS
SaveExploits0References1Affected Software5
OSV
OSV
added 2022/10/11 3:15 p.m.4 views

ALPINE-CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS6.9AI score0.02976EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/11 3:15 p.m.4 views

DEBIAN-CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS7.4AI score0.02976EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/11 3:15 p.m.30 views

CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS0.02976EPSS
SaveExploits0References5
OSV
OSV
added 2022/10/11 3:15 p.m.6 views

UBUNTU-CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS6.7AI score0.02976EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/10/11 3:0 p.m.86 views

CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS7.4AI score0.02976EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/10/11 3:0 p.m.73 views

CVE-2022-3358

OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...

7.5CVSS7.5AI score0.02976EPSS
SaveExploits0
Rows per page
Query Builder