PT-2022-21208 · Apache · Apache Uima

Name of the Vulnerable Software and Affected Versions: Apache UIMA versions prior to 3.3.0 Description: A relative path traversal vulnerability in the FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory usi...

CVE-2022-32287 Apache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archives

A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA Apache UIMA version 3.3.0 and prior...

Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp

Impact The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be appended to another. Patches It has been patched in 2.6.0 for muhammara and not at all for hummus Workarounds Do not process...

Code injection

Muhammara is a node module with c/cpp bindings to modify PDF with js for node or electron based/replacement on/of galkhana/hummusjs. The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be...

CVE-2022-39381 Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp

Muhammara is a node module with c/cpp bindings to modify PDF with js for node or electron based/replacement on/of galkhana/hummusjs. The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be...

PT-2022-24941 · Npm · Muhammara +1

Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.0 hummus affected versions not specified Description: The issue is related to a Denial of Service DoS condition that occurs when a maliciously crafted PDF file is supplied to be appended to another. This can...

CVE-2022-39381 Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp

Muhammara is a node module with c/cpp bindings to modify PDF with js for node or electron based/replacement on/of galkhana/hummusjs. The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be...

CVE-2022-3780

Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data. This issue affects : Remote Desktop Manager 2022.3.7 and prior versions...

CVE-2022-3780

Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data. This issue affects : Remote Desktop Manager 2022.3.7 and prior versions...

CVE-2022-3780

Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data. This issue affects : Remote Desktop Manager 2022.3.7 and prior versions...

GHSA-9CV5-4WQV-9W94 muhammara and hummus vulnerable to denial of service by NULL pointer dereference

Impact The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed. Patches It has been patched in 3.1.1 and has been backported to 2.6.1 Hummus has a patch i...

CVE-2022-3766

creationtimestamp| type| source ---|---|--- 2022-10-31 13:37:45+00:00| seen| https://t.me/cibsecurity/52278 2025-02-11 16:52:57+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-3766.yaml 2025-02-12 21:02:01+00:00| seen|...

CVE-2022-3400

creationtimestamp| type| source ---|---|--- 2022-10-28 20:29:46+00:00| seen| https://t.me/cibsecurity/52231 2022-10-28 22:29:48+00:00| seen| https://t.me/cibsecurity/52252...

CVE-2022-2809

creationtimestamp| type| source ---|---|--- 2022-10-27 16:28:17+00:00| seen| https://t.me/cibsecurity/52149 2022-10-27 16:28:20+00:00| seen| https://t.me/cibsecurity/52151...

CVE-2022-41742

creationtimestamp| type| source ---|---|--- 2022-10-27 11:51:22+00:00| seen| https://t.me/cibsecurity/51857 2025-02-11 04:00:07+00:00| published-proof-of-concept| Telegram/VDuXxbJBbFcH5TC0TJgn8Pm2tnWrnFWJssJCqPb0YjXQKGk 2025-02-13 06:00:18+00:00| published-proof-of-concept|...

PT-2022-21870 · Horner Automation · Cscape

Name of the Vulnerable Software and Affected Versions: Horner Automation's Cscape version 9.90 SP 7 and prior Description: The issue arises from improper validation of user-supplied data. If a user opens a maliciously formed FNT file, an attacker could execute arbitrary code within the current...

PT-2022-21869 · Horner Automation · Cscape

Name of the Vulnerable Software and Affected Versions: Horner Automation's Cscape versions 9.90 SP 6 and prior Description: The issue arises from improper validation of user-supplied data. If a user opens a maliciously formed FNT file, an attacker could execute arbitrary code within the current...

CVE-2022-38181

creationtimestamp| type| source ---|---|--- 2022-10-25 22:26:53+00:00| seen| https://t.me/cibsecurity/52068 2023-01-23 16:49:11+00:00| published-proof-of-concept| Telegram/ddXtalayEc9Xq7j2bkcE9pfDSSyywLvoptnUGWHZuVd6Vc 2023-01-25 16:50:07+00:00| published-proof-of-concept|...

CVE-2022-39327

creationtimestamp| type| source ---|---|--- 2022-10-25 20:40:51+00:00| seen| https://t.me/cibsecurity/52053 2022-10-29 17:56:07+00:00| seen| https://t.me/ctinow/72150...

CVE-2022-42827

creationtimestamp| type| source ---|---|--- 2022-10-25 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=902 2022-10-25 05:37:45+00:00| exploited| https://t.me/thehackernews/2693 2022-10-25 09:38:17+00:00| exploited| https://t.me/itsecnews/1620 2022-10-25 10:56:53+00:00|...