3353 matches found
CVE-2022-34707
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2022-34704
Windows Defender Credential Guard Information Disclosure Vulnerability...
CVE-2022-33649
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2022-33636
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2022-33646
Azure Batch Node Agent Elevation of Privilege Vulnerability...
CVE-2022-34696
Windows Hyper-V Remote Code Execution Vulnerability...
CVE-2022-24516
Microsoft Exchange Server Elevation of Privilege Vulnerability...
CVE-2022-30194
Windows WebBrowser Control Remote Code Execution Vulnerability...
GHSA-5VRC-7JFR-4642 monorepo-build Command Injection vulnerability
A command injection vulnerability affects all versions of package monorepo-build...
Code injection
When compressing or decompressing a point on the NIST P-256 elliptic curve with an X coordinate of zero, the resulting output is not properly reduced modulo the P-256 field prime and is invalid. The resulting output will cause an error when used in other operations. This may be leveraged by an...
Western Digital Sweet B 安全漏洞
Western Digital Sweet B is a library from Western Digital, Inc. that implements public-key elliptic curve cryptography ECC using NIST P-256 and SECG secp256k1 curves. A security vulnerability exists in the Western Digital Sweet B library, which could be exploited by an attacker to cause a limited...
OpenJDK: random exponentials issue (Libraries, 8283875)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated...
CVE-2021-42535
VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage...
CVE-2022-34551
Sims v1.0 was discovered to allow path traversal when downloading attachments...
GHSA-PC62-CQ5X-3J5G node-import `params` argument can be controlled by users without any sanitization
This affects all versions of package node-import. The params argument of module function can be controlled by users without any sanitization. This is then provided to the “eval” function located in line 79 in the index file index.js...
CVE-2022-24083
Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks...
CVE-2022-2136
The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to disclose information...
CVE-2022-2142
The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information...