17638 matches found
CVE-2022-35904
Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x contain an out-of-bounds read when opening an IFC file with crafted data. Exploitation occurs during IFC parsing, potentially allowing an attacker to read information in the context of the current process. Affected products: ...
CVE-2022-35902
Bentley MicroStation (before 10.17.0.x) and Bentley View (before 10.17.0.x) are affected. Opening OBJ files with crafted data can trigger an out-of-bounds read during OBJ parsing, potentially allowing an attacker to read information within the context of the current process. The available connect...
CVE-2022-35901
The CVE-2022-35901 issue affects Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. The vulnerability arises when opening a J2K file containing crafted data in an affected MicroStation-based application, potentially causing an out-of-bounds read and allowing an attacker to r...
CVE-2022-35900
Summary: CVE-2022-35900 affects Bentley MicroStation and Bentley View prior to version 10.17.0.x. The issue arises when opening a JP2 file containing crafted data, which can trigger an out-of-bounds read during JP2 parsing. This may allow an attacker to read information within the context of the ...
GHSA-44VR-RWWJ-P88H Shescape vulnerable to insufficient escaping of whitespace
Impact This only impacts users that use the escape or escapeAll functions with the interpolation option set to true. Example: javascript import cp from "node:childprocess"; import as shescape from "shescape"; // 1. Prerequisites const options = shell: "bash", // Or shell: "dash", // Or shell:...
CVE-2022-32318
The Connected documents confirm a persistent cross-site scripting (XSS) vulnerability in Fast Food Ordering System v1.0, exploitable via the request parameter in /ffos/classes/Master.php?f=save_category. The CVE entry (CVE-2022-32318) identifies the affected product as Fast Food Ordering System v...
CVE-2021-39019
CVE-2021-39019 affects IBM Engineering Lifecycle Optimization – Publishing components (versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2). The root cause is information disclosure via HTTP GET to an authenticated user, disclosing highly sensitive information. Connected sources confirm an HTTP GET-based ...
The Kit That Wants It All: Scam Mimics PayPal’s Known Security Measures
Identity theft affects millions of people every year. See this piece on a scam purporting to be PayPal in an effort to gain total identity theft...
GHSA-5PGM-3J3G-2RC7 Valinor error messages leading to potential data exfiltration before v0.12.0
php registerConstructorMoney::class, 'fromString' -mapper; try vardump$mapper-mapFoo::class, 'a' = 'HAHA', 'b' = '100 EUR', 'c' = 'USD 100' ; catch MappingError $e $messages = new NodeTraverserfunction Node $node foreach $node-messages as $message vardump '$message', $message-path, $message-body ...
CVE-2022-2297
creationtimestamp| type| source ---|---|--- 2022-07-12 20:25:18+00:00| seen| https://t.me/cibsecurity/46073 2025-05-21 15:50:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinicpmssqlitorce.rb 2025-05-22 21:02:16+00:00| seen|...
CVE-2022-34272
CVE-2022-34272 affects Siemens PADS Standard/Plus Viewer (all versions). Affected component: PCB file parsing; vulnerability is an out-of-bounds read past end of allocated buffer, enabling potential code execution in the current process (FG-VD-22-037, FG-VD-22-059). CVSSv3 base score 7.8 (local, ...
CVE-2020-4138
creationtimestamp| type| source ---|---|--- 2022-07-11 20:19:21+00:00| seen| https://t.me/cibsecurity/45934...
CVE-2022-35370
CVE-2022-35370 entry is rejected/not used per the initial description.