CVE-2022-43820

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

PT-2025-54131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to a potential overflow condition within the iomap write delalloc scan function. The folio next index function returns an unsigned long value,...

CVE-2022-4864

creationtimestamp| type| source ---|---|--- 2022-12-31 02:14:17+00:00| seen| https://t.me/cibsecurity/55653...

CVE-2022-46601

creationtimestamp| type| source ---|---|--- 2022-12-31 00:27:32+00:00| seen| https://t.me/cibsecurity/55644...

CVE-2022-44137

creationtimestamp| type| source ---|---|--- 2022-12-30 07:13:38+00:00| seen| https://t.me/cibsecurity/55544 2025-04-11 22:51:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11495...

AZL-12133 CVE-2022-42898 affecting package krb5 for versions less than 1.19.4-1

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

ALPINE-CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

IP-COM M50 安全漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a contained buffer overflow vulnerability via the indexSet parameter in the formIPMacBindDel function...

Rockwell Automation Studio 5000 Logix Designer 授权问题漏洞

Rockwell Automation Studio 5000 Logix Designer is a Windows-based application from Rockwell Automation, Inc. It is used to build programs for PLCs. An access control error vulnerability exists in Rockwell Automation Studio 5000 Logix Designer version v.20-33, which arises from a user being grante...

CVE-2022-22737

Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for...

Microsoft Client Server Run-time Subsystem 安全漏洞

The Microsoft Client Server Run-time Subsystem is a client/server run-time subsystem from Microsoft Corporation in the United States that manifests itself as the csrss.exe process. It is a component of the Windows NT family of operating systems, appearing in Windows NT 3.1 and subsequent systems,...

CVE-2022-45269

A directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7.35.ST15 allows attackers to read arbitrary files...

DHIS 2 安全漏洞

DHIS 2 is a software application. A flexible information system for data capture, management, validation, analysis and visualization. A security vulnerability exists in DHIS 2 core versions 2.34, 2.35, 2.36, 2.37, 2.38, and 2.39, which originates from the fact that a DHIS 2 user who has the right...

DHIS 2 跨站脚本漏洞

DHIS 2 is a software application. A flexible information system for data capture, management, validation, analysis and visualization. A cross-site scripting vulnerability exists in DHIS 2 core versions 2.35, 2.36, 2.37, 2.38, 2.39, which arises from various features of DHIS 2 that allow an...

The vulnerability of the Wi-Fi hotspot implementation in the RouterOS operating system of MikroTik allows a hacker to execute arbitrary code.

The vulnerability of the Wi-Fi hotspot implementation in the RouterOS operating system of MikroTik lies in the ability to read data beyond the buffer in memory during the processing of the u32id key. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending...

USN-5735-1 sysstat vulnerability

It was discovered that Sysstat did not properly check bounds when perfoming certain arithmetic operations on 32 bit systems. An attacker could possibly use this issue to cause a crash or arbitrary code execution...

sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow

...

PT-2022-26121

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1, 2.9.3, and 2.8.4 Description The issue arises when BCast::ToShape is given input larger than an int32, causing it to crash despite being supposed to handle up to an int64. An exampl...

PT-2022-35572 · Xen +1 · Xen/Gntdev +1

Name of the Vulnerable Software and Affected Versions: xen/gntdev versions prior to v5.10.152 Description: The issue is related to VMA splitting in xen/gntdev. It was introduced in version v2.6.38 and fixed in Linux Kernel version v5.10.152. The actual impact and attack plausibility have not yet...