17638 matches found
CVE-2022-30231
CVE-2022-30231 affects Siemens SICAM GridEdge Essential products (ARM/Intel variants, with/without GDS) and SICAM GridEdge Classic in affected ranges, where prior to v2.6.6 a resource-leak exposes password hashes of other users upon request. The vulnerability enables an authenticated user to retr...
CVE-2022-29925
CVE-2022-29925 affects Fuji Electric Monitouch V-SFT in the simulator module. An uninitialized pointer vulnerability in V-SFT versions prior to 6.1.6.0 can allow information disclosure and, potentially, arbitrary code execution when a user opens a specially crafted image file. Multiple connected ...
CVE-2022-29522
The CVE-2022-29522 entry affects Fuji Electric’s V-SFT (Monitouch) graphic editor, specifically the simulator module, where a Use-After-Free condition can be triggered by opening a specially crafted image file. The linked JVN/UVD entries confirm the vulnerability class (CWE-416) and indicate impa...
NetApp E-Series SANtricity OS Controller Software Vulnerabilities - Lenovo Support US
No description provided...
CVE-2022-32192
CVE-2022-32192 affects Couchbase Server 5.x through 7.x before 7.0.4 and results in exposure of sensitive information to an unauthorized actor. The connected documents consistently describe an information-disclosure vulnerability in Couchbase Server, but do not provide a concrete, publicly disclo...
CVE-2022-32558
CVE-2022-32558 affects Couchbase Server prior to 7.0.4. The issue arises during sample bucket loading, where a failure may disclose internal user passwords. The connected sources reiterate this information disclosure vector and the impact (confidentiality of passwords) but do not provide explicit...
CVE-2022-32740
CVE-2022-32740 affects OTRS where a reply to a forwarded email article could unintentionally expose the email content to the ticket customer. Public sources in connected documents specify affected versions (OTRS 8.0.x up to 8.0.23 and 7.0.x up to 7.0.35) and describe a third party’s insufficient ...
Emerson Dixell Arbitrary File Write (CVE-2021-45420)
An arbitrary file write vulnerability exists in Emerson Dixell. Successful exploitation of this vulnerability could result in denial of service and potentially code execution on the affected system...
CVE-2022-24429
The CVE-2022-24429 entry concerns convert-svg-core before 0.6.3, which is vulnerable to Arbitrary Code Injection via a specially crafted SVG file. Affected component is the SVG-to-PNG rendering flow; root cause involves improper handling/removal of malicious SVG attributes, enabling an attacker t...
CVE-2017-20034
creationtimestamp| type| source ---|---|--- 2022-06-10 14:37:28+00:00| seen| https://t.me/cibsecurity/44161...
girinfork.com Cross Site Scripting vulnerability OBB-2645476
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-31051
CVE-2022-31051 affects the open‑source npm package semantic-release . The vulnerability causes concealed secrets to be disclosed when they contain characters that are not encoded by encodeURI , in contexts where pushing to the repository requires modifying the URL to inject credentials. Public re...
New Emotet Variant Stealing Users' Credit Card Information from Google Chrome
--- Image Source: Toptal The notorious Emotet malware has turned to deploy a new module designed to siphon credit card information stored in the Chrome web browser. The credit card stealer, which exclusively singles out Chrome, has the ability to exfiltrate the collected information to different...
CVE-2022-30746
Summary: CVE-2022-30746 affects Samsung SmartThings prior to 1.7.85.12. A missing caller check in the JavaScript interface API can allow a remote attacker to access sensitive information. The vulnerability is described across multiple sources (NVD, Red Hat, CNVD/CNNVD references) as a missing cal...
CVE-2022-30716
CVE-2022-30716 concerns the Samsung DisplayToast component on Android. The issue is an unprotected broadcast in sendIntentForToastDumpLog within DisplayToast, which could let untrusted apps access toast message information from the device. The vulnerability enables information disclosure with a n...
CVE-2022-1550
CVE-2022-1550 entry is rejected/not used and does not represent an active vulnerability.
CVE-2022-1966
CVE-2022-1966 is a Linux kernel use-after-free in net/netfilter/nf_tables_api.c (NFT_STATEFUL_EXPR check) that can enable local privilege escalation to root. Public advisories (Amazon Linux 2, ALAS, Red Hat/CentOS references) cite this vulnerability and recommend updating the kernel packages or a...