PT-2022-5151 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this...

PT-2022-5065 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Use After Free vulnerability, which can be exploited to execute arbitrary code in the context of the current user. This c...

PT-2022-5081 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. This...

CVE-2022-20128

creationtimestamp| type| source ---|---|--- 2022-09-11 20:20:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6778 2022-09-13 14:05:05+00:00| published-proof-of-concept| https://t.me/CNArsenal/259 2023-03-28 08:55:29+00:00| published-proof-of-concept|...

CVE-2022-20696

creationtimestamp| type| source ---|---|--- 2022-09-08 16:15:13+00:00| seen| https://t.me/cibsecurity/49458 2022-09-12 16:14:17+00:00| seen| https://t.me/informationsecuritychannel/48429...

CVE-2022-20923

creationtimestamp| type| source ---|---|--- 2022-09-08 12:18:30+00:00| seen| https://t.me/itsecnews/1387 2022-09-08 15:20:10+00:00| seen| https://t.me/truesecator/3392 2022-09-08 16:15:09+00:00| seen| https://t.me/cibsecurity/49454 2022-09-09 08:20:14+00:00| seen| https://t.me/codebysec/6548...

Hardcoded cUSDT and cUSDC prices are dangerous to the system when those stablecoins depeg

Lines of code Vulnerability details Proof of Concept function getUnderlyingPriceCToken ctoken external override view returnsuint address underlying; //manual scope to pop symbol off of stack string memory symbol = ctoken.symbol; if compareStringssymbol, "cCANTO" underlying = addresswcanto; return...

PT-2022-5016 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: Rizin versions 0.4.0 and prior Description: The issue is related to an out-of-bounds write when getting data from dyld cache files. A user opening a malicious dyld cache file could be affected, allowing an attacker to execute code on the user...

CVE-2022-39050

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external...

CVE-2022-39050

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external...

UBUNTU-CVE-2022-39050

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external...

Code injection

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external...

CVE-2022-39050

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external...

CVE-2022-39050 Possible XSS stored in customer information

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external...

CVE-2022-36078

CVE-2022-36078 affects github.com/gagliardetto/binary. The memory-allocation vulnerability arises when decoding data into slices (e.g., via dec.Decode(&val)) where the slice length is read from input without proper bounds checks, enabling excessive memory allocation and potential DoS. The advisor...

The vulnerability of the command-line interface (CLI) of the Kubernetes cluster synchronization software, which connects it to Flux configuration sources, allows a malicious actor to read or write arbitrary files on the system.

The vulnerability of the command-line interface CLI of the Kubernetes cluster synchronization software with respect to configuration sources from Flux is related to an incorrect path name limitation for accessing the restricted directory. Exploiting this vulnerability could allow an attacker to...

CVE-2020-36193

creationtimestamp| type| source ---|---|--- 2022-09-01 17:03:00+00:00| seen| https://t.me/technicalprivatecat/128 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:32:50+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971689 2025-02-23...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19)

The version of AOS installed on the remote host is prior to 5.19. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - eve...

CVE-2022-28799

creationtimestamp| type| source ---|---|--- 2022-08-31 16:59:06+00:00| seen| https://t.me/codebysec/6503 2022-08-31 18:28:51+00:00| seen| https://t.me/cibsecurity/49105 2022-09-01 08:26:07+00:00| seen| https://t.me/itsecnews/1340 2022-09-01 14:26:12+00:00| seen| https://t.me/truesecator/3365...

Moderate: Red Hat Security Advisory: convert2rhel security, bug fix, and enhancement update

An update for convert2rhel is now available for Convert2RHEL for RHEL-8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...