Multiple Adobe Products Out-of-Bounds Reading Vulnerabilities (CNVD-2022-43459)

Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. several Adobe products have an out-of-bounds read vulnerability, which can be exploited by attackers to bypass mitigation measures such as...

Out-of-bounds read vulnerability in multiple Adobe products (CNVD-2022-43463)

Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. Multiple Adobe products have an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR...

Avast Premium Security Arbitrary File Writing Vulnerability

Avast Premium Security is an application from the Czech company Avast. Avast Premium Security has an arbitrary file writing vulnerability that can be exploited to cause a denial of service DoS via a specially crafted DLL file...

ARCHISITE Thecus 4800Eco Command Injection Vulnerability

ARCHISITE Thecus 4800Eco is a server from ARCHISITE Japan. ARCHISITE Thecus 4800Eco is vulnerable to command injection, which can be exploited by attackers to inject commands...

Out-of-bounds read vulnerability in multiple Adobe products (CNVD-2022-43466)

Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. Multiple Adobe products have an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR...

RTX Cross-Site Scripting Vulnerability

RTX is RTXteam's prototype translation reasoning tool. versions prior to RTX checkpoint2022-05-18 have a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scripting XSS attacks...

CISA Adds 20 Known Exploited Vulnerabilities to Catalog

CISA has added 20 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

CVE-2022-0781

creationtimestamp| type| source ---|---|--- 2022-05-23 12:35:38+00:00| seen| https://t.me/cibsecurity/43152 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-09...

CVE-2022-0346

creationtimestamp| type| source ---|---|--- 2022-05-23 12:35:36+00:00| seen| https://t.me/cibsecurity/43150 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability (CNVD-2022-64194)

Cisco Common Services Platform Collector CSPC is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling basic inventory and configuration data from Cisco devices.Cisco Common Services Platform Collecto...

CISA Adds 21 Known Exploited Vulnerabilities to Catalog

CISA has added 21 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

SAP Cloud Connector Cross-Site Scripting Vulnerability

SAP Cloud Connector is a connector for connecting to the SAP Cloud Platform from SAP Germany. A cross-site scripting vulnerability exists in SAP Cloud Connector version 2.0, which arises from a program that does not adequately encode user-controlled input, and can be exploited by an attacker with...

CVE-2022-21500

creationtimestamp| type| source ---|---|--- 2022-05-20 13:38:16+00:00| seen| https://t.me/cibsecurity/43018 2024-11-11 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-11 2024-11-26 00:00:00+00:00| exploited| The Shadowserver...

Lenovo Personal Cloud Storage Trust Management Issue Vulnerability (CNVD-2022-59193)

Lenovo Personal Cloud Storage is a cloud storage platform from Lenovo, a Chinese company. Lenovo Personal Cloud Storage is vulnerable to a trust management issue that stems from a weak default password for the serial port in the device, which could be exploited by an attacker to gain physical...

Cisco Common Services Platform Collector跨站脚本漏洞（CNVD-2022-50666）

Cisco Common Services Platform Collector is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling basic inventory and configuration data from Cisco devices.Cisco Common Services Platform Collector is...

TOTOLINK A3100R Buffer Overflow Vulnerability

TOTOLINK A3100R is a series of wireless routers from China Gion Electronics TOTOLINK.TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via a crafted POST request ...

CVE-2022-229600

creationtimestamp| type| source ---|---|--- 2022-05-19 12:12:49+00:00| exploited| https://t.me/truesecator/2957...

Jenkins Pipeline SCM API for Blue Ocean Plugin信息泄露漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins is an open source automation server that provides hundreds of plugins to support building, deploying, and automating any project. The vulnerability can be exploited to access arbitrary user...

invoiceninja cross-site scripting vulnerability

invoiceninja is an open source invoicing application built with Laravel and Flutter. invoiceninja suffers from a cross-site scripting vulnerability that can be exploited by attackers to execute malicious scripts...

Bento4 Denial of Service Vulnerability (CNVD-2022-74158)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0.0 contains a denial of service vulnerability that stems from a segmentation error in the /x8664/multiarch/strlen-avx2.S component, which could be exploited by an attacker to cause a denial of service...