448 matches found
CVE-2022-27675
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2023-22944
REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...
+Message App improper handling of Unicode control characters
Overview +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's specifications. Therefore, a crafted text may display misleading web links CWE-451. Akaki Tsunoda reported this vulnerability to IPA. JPCERT/CC...
CVE-2022-4124
creationtimestamp| type| source ---|---|--- 2022-12-19 16:10:48+00:00| seen| https://t.me/cibsecurity/54872...
1508-cli (>=1.0.4 <=1.0.6), 40banner (>=1.0.0 <=1.1.2) +4500 more potentially affected by CVE-2022-25912 via simple-git (>=0.10.0 <=3.14.1)
simple-git NPM version =0.10.0, =1.0.4, =1.0.0, =0.0.80, =1.0.0, =2.0.0, =0.0.0, =0.0.1, =0.0.1, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.1.16 and more Source cves: CVE-2022-25912 Source advisory: OSV:GHSA-9P95-FXVG-QGQ2...
CVE-2022-45012
creationtimestamp| type| source ---|---|--- 2022-11-22 00:38:38+00:00| seen| https://t.me/cibsecurity/53242...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection due to an incomplete fix for CVE-2022-40764. A successful exploit allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. In order to...
animl (>=1.1.2 <=1.1.4), arekit (>=0.21.0 <=0.22.1) +183 more potentially affected by CVE-2022-36013 via tensorflow-gpu (>=1.10.1 <=2.7.0)
tensorflow-gpu PYPI version =1.10.1, =1.1.2, =0.21.0, =0.23.0, =0.9.2, =1.0.0, =0.1.0, =0.0.1, =0.0.9, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - brainhance =0.0.1 and more Source cves: CVE-2022-36013 Source advisory: OSV:GHSA-828C-5J5Q-VRJQ...
CVE-2022-38638
creationtimestamp| type| source ---|---|--- 2022-09-10 01:23:07+00:00| seen| https://t.me/cibsecurity/49562...
CVE-2022-2996
creationtimestamp| type| source ---|---|--- 2022-09-01 22:38:28+00:00| seen| https://t.me/cibsecurity/49184...
编号已被CVE保留
No details are available at this time...
2-package-manager (=1.0.0), @mspguarenteed/common (=1.0.4) +3 more potentially affected by unknown CVE via mongoos (=0.0.1-security)
mongoos NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mongoos and may be impacted: - 2-package-manager =1.0.0 - @mspguarenteed/common =1.0.4 - @shopappshree/common =1.0.1, =1.0.4 - calvin-2024 =1.0.0 - liana-2024 =1.0.0...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
CVE-2022-33318
creationtimestamp| type| source ---|---|--- 2022-07-20 20:12:13+00:00| seen| https://t.me/cibsecurity/46689 2022-08-05 12:35:50+00:00| published-proof-of-concept| https://t.me/ckuRED/178 2022-08-05 12:35:56+00:00| published-proof-of-concept| https://t.me/cKure/10040 2022-08-21 20:27:09+00:00|...
CVE-2022-34891
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...