Vulnerability found in Microsoft Windows

A vulnerability has been found in Microsoft Windows. A malicious party can exploit the vulnerability to execute arbitrary code under privileges of the logged-in user. To do this the malicious party must induce the victim to open a rogue file. The vulnerability is located in Mark-of-the-Web...

CVE-2022-3598

LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b...

CVE-2022-3626

LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemset in libtiff/tifunix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit...

CVE-2019-11072

creationtimestamp| type| source ---|---|--- 2022-10-20 01:22:59+00:00| seen| https://t.me/isendpackets/129 2024-01-06 17:30:54+00:00| seen| https://t.me/arpsyndicate/2563...

CVE-2022-43408

creationtimestamp| type| source ---|---|--- 2022-10-19 20:15:28+00:00| seen| https://t.me/cibsecurity/51804 2025-10-04 07:02:40+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2dz6qfykut2 2025-10-04 07:13:11+00:00| seen|...

CVE-2022-42948

creationtimestamp| type| source ---|---|--- 2022-10-18 19:20:04+00:00| seen| https://t.me/truesecator/3577 2022-10-20 04:57:37+00:00| seen| https://t.me/itsecnews/1598 2023-03-24 17:52:15+00:00| seen| https://t.me/cibsecurity/60643 2023-06-14 21:10:04+00:00| seen|...

PT-2022-5236 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.4 and earlier Adobe Illustrator versions 25.4.7 and earlier Description: The issue is related to an out-of-bounds read when parsing a crafted file, potentially allowing an attacker to execute code in the context ...

AZL-78964 CVE-2022-41715 affecting package golang 1.25.7-1

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...

UBUNTU-CVE-2022-41715

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...

CVE-2022-41715 Memory exhaustion when compiling regular expressions in regexp/syntax

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...

CVE-2022-41715 Memory exhaustion when compiling regular expressions in regexp/syntax

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...

CVE-2022-41715

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...

CVE-2022-31123

Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature verification. An attacker can convince a server admin to download and successfully run a malicious plugin even though unsigned plugins are...

CVE-2022-31123

Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature verification. An attacker can convince a server admin to download and successfully run a malicious plugin even though unsigned plugins are...

UBUNTU-CVE-2022-31123

Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature verification. An attacker can convince a server admin to download and successfully run a malicious plugin even though unsigned plugins are...

CVE-2022-24697

creationtimestamp| type| source ---|---|--- 2022-10-13 16:27:39+00:00| seen| https://t.me/cibsecurity/51315 2022-12-30 14:14:11+00:00| seen| https://t.me/cibsecurity/55559...

CVE-2022-31123 Grafana plugin signature bypass vulnerability

Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature verification. An attacker can convince a server admin to download and successfully run a malicious plugin even though unsigned plugins are...

CVE-2022-31123 Grafana plugin signature bypass vulnerability

Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature verification. An attacker can convince a server admin to download and successfully run a malicious plugin even though unsigned plugins are...

Plugin signature bypass

Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature verification. An attacker can convince a server admin to download and successfully run a malicious plugin even though unsigned plugins are...

CVE-2022-41033

creationtimestamp| type| source ---|---|--- 2022-10-11 22:11:58+00:00| exploited| https://t.me/ctinow/68518 2022-10-11 22:26:21+00:00| seen| https://t.me/cibsecurity/51156 2022-10-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=892 2022-10-12 13:56:02+00:00| exploited|...