Lucene search
+L

24546 matches found

CNVD
CNVD
added 2022/10/10 12:00 a.m.85 views

Singularity Image Format Encryption Problem Vulnerability

Singularity Image Format is a compressed squashfs file system from Singularity that has a block organization structure, including metadata and definition files for containers, first labels, partition contents, signatures if they exist, and, of course, the containers for the binaries themselves...

9.8CVSS2.1AI score0.00533EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/10 12:00 a.m.11 views

The vulnerability of the command-line interpreter of the FortiADC application controller allows a hacker to execute arbitrary code.

The vulnerability of the command-line interpreter of the FortiADC application controler is related to the use of an uncontrolled format string. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00209EPSS
SaveExploits0References4Affected Software4
Vulnrichment
Vulnrichment
added 2022/10/09 12:00 a.m.9 views

CVE-2022-42012

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format...

6.8AI score0.01398EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2022/10/09 12:00 a.m.62 views

CVE-2022-42012

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format...

6.5CVSS6.4AI score0.01398EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/10/09 12:00 a.m.22 views

EulerOS Virtualization 3.0.6.6 : tcl (EulerOS-SA-2022-2539)

According to the versions of the tcl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple...

7.8CVSS7.8AI score0.01639EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/09 12:00 a.m.35 views

CVE-2022-42012

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format...

6.5CVSS3.3AI score
SaveExploits0References8
OSV
OSV
added 2022/10/07 8:15 p.m.14 views

CVE-2022-26473

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...

6.7CVSS5.9AI score0.00109EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/07 8:15 p.m.22 views

CVE-2022-26473

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...

6.7CVSS0.00109EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/10/07 8:15 p.m.5 views

CVE-2022-26473

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...

6.7CVSS6.9AI score0.00109EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/07 8:15 p.m.7 views

CVE-2022-26471

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...

7.8CVSS7.3AI score0.00104EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/07 8:15 p.m.6 views

CVE-2022-26472

In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319095; Issue ID: ALPS07319095...

7.8CVSS7.3AI score0.00145EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/07 8:15 p.m.9 views

CVE-2022-26471

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...

7.8CVSS5.9AI score0.00104EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/07 8:15 p.m.9 views

CVE-2022-26472

In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319095; Issue ID: ALPS07319095...

7.8CVSS5.9AI score0.00145EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/07 8:15 p.m.25 views

CVE-2022-26471

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...

7.8CVSS0.00104EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/07 8:15 p.m.28 views

CVE-2022-26472

In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319095; Issue ID: ALPS07319095...

7.8CVSS0.00145EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/07 8:15 p.m.17 views

Privilege escalation

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...

4.3CVSS7.7AI score0.00104EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/10/07 8:15 p.m.24 views

Privilege escalation

In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319095; Issue ID: ALPS07319095...

4.3CVSS7.7AI score0.00145EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/10/07 6:15 p.m.8 views

CVE-2021-40162

A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code...

7.8CVSS7.3AI score0.00927EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/07 7:20 a.m.73 views

GHSA-93M7-C69F-5CFJ xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

7.5CVSS9.7AI score0.01936EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2022/10/07 7:20 a.m.36 views

xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS9.2AI score0.01936EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder