CVE-2022-20167: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A...

CVE-2022-20171: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A...

CVE-2022-20170: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A...

CVE-2022-20175: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A...

CVE-2022-20173: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A...

CVE-2022-2013: Undefined Security Weakness

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space...

CVE-2022-32511: Undefined Security Weakness

jmespath.rb aka JMESPath for Ruby before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable...

DEBIAN-CVE-2022-22577

An XSS Vulnerability in Action Pack = 5.2.0 and 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses...

CVE-2022-26727: Undefined Security Weakness

This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system...

CVE-2022-26708: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution...

GHSA-67FJ-6W6M-W5J8 Reversible One-Way Hash in io.github.javaezlib:JavaEZ

Impact This weakness allows the force decryption of locked text by hackers. The issue is NOT critical for non-secure applications, however may be critical in a situation where the highest levels of security are required. This issue ONLY affects v1.6 and does not affect anything pre-1.6. Upgrading...

curl: CVE-2022-32205: Set-Cookie denial of service

Summary: Curl fails to limit the number of cookies that can be set by a single host/domain. It can easily lead to a situation where constructing the request towards a host will end up consuming more than DYNHTTPREQUEST memory, leading to instant CURLEOUTOFMEMORY. Any host in a given domain can...

CVE-2022-29789: Undefined Security Weakness

The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services...

Anaconda3 操作系统命令注入漏洞

Anaconda3 is a distribution of the Python and R programming languages for scientific computing data science, machine learning applications, large-scale data processing, predictive analytics, etc. from the American company Anaconda. It is dedicated to simplifying package management systems and...

CVE-2022-20120: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A...

CVE-2021-4138: Undefined Security Weakness

Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname...

CVE-2019-25059: Undefined Security Weakness

Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839...

CVE-2016-20014: Undefined Security Weakness

In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...

CVE-2022-1318

Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuration pages can be viewed by a malicious actor. The size of certain communications packets are predictable. This would allow an attacker to learn the state of the system if the...

CVE-2022-21498: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM...