13092 matches found
Content Spoofing
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
OSV-2022-457 Heap-buffer-overflow in CFF::Charset::collect_glyph_to_sid_map
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47790 Crash type: Heap-buffer-overflow READ 2 Crash state: CFF::Charset::collectglyphtosidmap cffsubsetplan::plansubsetcharset cffsubsetplan::create...
DSA-5158-1 thunderbird - security update
Bulletin has no description...
Command Injection
librenms/librenms is vulnerable to command injection. The vulnerability exists in pollservice function because the serviceip, hostname, and serviceparam parameters are not properly handled which allows an attacker to inject and execute arbitrary commands...
MAL-2022-1362 Malicious code in azure-pipelines-dependency-track (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d8de0a03478a809b8f29b605fa046f7b89e682904f1dbfb3321aa9e64df94f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PUB-A-209906686
Bulletin has no description...
PUB-A-215001024
In kbasememalias of malikbasememlinux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-222091980
In rcucblistdequeue of rcusegcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-127973231
Bulletin has no description...
PUB-A-224859358
Bulletin has no description...
PUB-A-209153114
Bulletin has no description...
PUB-A-210594998
Bulletin has no description...
PUB-A-213173524
Bulletin has no description...
PUB-A-209481085
Bulletin has no description...
PUB-A-176754369
In ipucorejqsmsgtransportkernelwritesync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
MAL-2022-6136 Malicious code in sixt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db59f1b325dca20e6aa112d88e03b0238a9e4b026480cd4c74b766991cbc5ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-29725
An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file...
DLA-3037-1 libjpeg-turbo - security update
Bulletin has no description...
The Quad commits to strengthening cybersecurity in software, supply chains
The United States, Australia, and its Asian partners—India and Japan—have agreed to work on several cybersecurity initiatives on software, supply chain, and user data. The countries leaders, who convened in Tokyo on May 24, 2022, have met annually four times since the revival of the...