CVE-2022-24051

Removed by vendor...

CVE-2022-24051

CVE-2022-24051 corresponds to a MariaDB CONNECT Storage Engine vulnerability described as a Format String Privilege Escalation. The issue stems from inadequate validation of a user-supplied string when it is used as a format specifier during SQL processing, which can allow a local attacker to esc...

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

CVE-2022-24050

Removed by vendor...

CVE-2022-24050

CVE-2022-24050 : MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation. The issue stems from failing to validate the existence of an object before operating on it, enabling a local attacker (authentication required) to escalate privileges and potentially execute code in the service a...

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

CVE-2022-24050

Disclaimer: This data contains information about vulnerable...

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-24048

Disclaimer: This data contains information about vulnerable...

CVE-2022-24048

Removed by vendor...

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-24048

CVE-2022-24048 corresponds to a MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation. The issue arises from insufficient validation of user-supplied data length before copying it into a fixed-length stack buffer, enabling a local attacker with authentication to escalate...

CVE-2022-24047

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-24046

Summary: CVE-2022-24046 affects Sonos One Speaker (S2 apps before 3.4.1; S1 apps before 11.2.13 build 57923290). The flaw is in the anacapd daemon and stems from improper validation of user-supplied data, causing an integer underflow and allowing code execution with root privileges. The vulnerabi...

CVE-2021-46656

CVE-2021-46656 affects Bentley View 10.15.0.75. The flaw is a JT file parsing buffer overflow that can lead to remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is documented across multiple sources (e.g., ZDI-22-243, ...

CVE-2021-46655

Bentley View 10.15.0.75 is affected by CVE-2021-46655. The flaw occurs in JT file parsing due to not validating the existence of an object before operations, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or ...

CVE-2021-46655

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46654

Bentley View 10.15.0.75 is affected by a DGN file parsing flaw that can read past the end of an allocated buffer, enabling information disclosure. The issue requires user interaction (visiting a malicious page or opening a malicious file) and can be leveraged with other vulnerabilities to execute...

CVE-2021-46653

Bentley View 10.15.0.75 is affected by a heap-based buffer overflow in BMP image parsing due to insufficient validation of the length of user-supplied data. This allows remote attackers to execute arbitrary code in the context of the current process, with user interaction required (target must vi...