Delight Nashorn Sandbox Denial of Service Vulnerability

Delight Nashorn Sandbox is a sandbox for executing JavaScript in Java using Nashorn from Java Delight A denial of service vulnerability exists in Delight Nashorn Sandbox version 0.2.0, which stems from a weak expression that can be exploited and can be used by an attacker to The vulnerability lea...

IBM AIX and VIOS Denial of Service Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX versions 7.1, 7.2, 7.3 and VIOS version 3.1 have a denial-of-service vulnerability that stems from failure to properly process incoming error messages, which can be exploited by...

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68957)

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, a personal developer, has a SQL injection vulnerability in version v1.0, which originates in /school/model/ getevents.php?eventid=The page lacks validation for external input SQL statements, which could be...

Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2022-59679)

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68956)

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, is a SQL injection vulnerability in version v1.0 of Advanced School Management System, which originates from /school/model/ getclassroom.php?id=The page lacks validation for external input SQL statements,...

Path traversal

Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted request to the resource handler...

Samsung Internet Autofill Algorithm Vulnerability

Samsung Internet is a browser for Samsung cell phones. A vulnerability in the autofill algorithm exists in versions prior to Samsung Internet 17.0.1.69, which can be exploited by an attacker to guess a stored credit card number...

Samsung Account Privilege Management Improper Vulnerability (CNVD-2022-64088)

Samsung Account is a cell phone account from Samsung, a South Korean company. versions prior to Samsung Account 13.2.00.6 contain a privilege management vulnerability that could be exploited to obtain a user's email or phone number with normal-level privileges...

Samsung Account Privilege Management Improper Vulnerability (CNVD-2022-64086)

Samsung Account is a cell phone account from Samsung South Korea. versions prior to Samsung Account 13.2.00.6 contain a privilege management vulnerability that could be exploited by attackers to obtain accesstoken without permission...

Huawei EMUI and Magic UI Denial of Service Vulnerability (CNVD-2023-01057)

Huawei EMUI is a mobile operating system based on Android development.Huawei Magic UI is a smart device operating system. A security vulnerability exists in Huawei EMUI and Magic UI, which stems from a configuration flaw in the Secure Operating System module that can be exploited by an attacker t...

Samsung Account Information Disclosure Vulnerability (CNVD-2022-64085)

Samsung Account is a cell phone account from Samsung, a South Korean company. versions prior to Samsung Account 13.2.00.6 contain an information disclosure vulnerability that could be exploited by an attacker to obtain a user's email or phone number without permission...

CVE-2022-20233

creationtimestamp| type| source ---|---|--- 2022-06-15 18:26:40+00:00| seen| https://t.me/cibsecurity/44533 2022-08-12 12:38:51+00:00| exploited| https://t.me/androidMalware/1614 2022-08-13 09:51:54+00:00| exploited| https://t.me/thebugbountyhunter/6443 2022-08-17 20:00:06+00:00|...

Follina: A zero-day vulnerability in Microsoft Office

Threat Level Attack Report For a detailed advisory, download the pdf file here Summary Microsoft has issued a patch after almost 15 days for a zero-day vulnerability identified as CVE-2022-30190 after various proof-of-concept POCs indicating that it is actively exploited became public. Security...

Patch Tuesday: Microsoft Issues Fix for Actively Exploited 'Follina' Vulnerability

Microsoft finally released fixes to address an actively exploited Windows zero-day vulnerability known as Follina as part of its Patch Tuesday updates. Also addressed by the tech giant are 55 other flaws, three of which are rated Critical, 51 are rated Important, and one is rated Moderate in...

Siemens SICAM GridEdge Source Authentication Error Vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC61850 devices with just a few clicks.A source authentication error vulnerability in Siemens SICAM GridEdge is caused by the fact that the affected software does not apply cross-domain resource sharing CORS restrictions to critical...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-50934)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. The vulnerability can be exploited to crash the...

Siemens SINEMA Remote Connect Server Access Control Error Vulnerability (CNVD-2022-45224)

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.An access control error vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from the...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-50939)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. The vulnerability can be exploited to crash the...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-50941)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. The vulnerability can be exploited to crash the...

Siemens SINEMA Remote Connect Server Cross-Site Scripting Vulnerability (CNVD-2022-45230)

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.A cross-site scripting vulnerability exists in Siemens SINEMA Remote Connect Server, which could be...