396076 matches found
CVE-2020-25163: Improper Neutralization of Input During Web Page Generation
A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclosure, modification, or deletion is also possible if a victim views or interacts with the infected display. This...
CVE-2020-35631: Improper Validation of Array Index
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-28604: Improper Validation of Array Index
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2021-23284: Improper Neutralization of Input During Web Page Generation
Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...
CVE-2022-24841: Improper Access Control
fleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams feature are affected by this authorization bypass issue. Fleet instances without teams, or with teams but without restricted team accounts are not affected. In affected versions a te...
CVE-2022-1383: Heap-based Buffer Overflow
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...
CVE-2022-26816: Undefined Security Weakness
Windows DNS Server Information Disclosure Vulnerability...
CVE-2022-20727: Improper Limitation of a Pathname to a Restricted Directory
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...
CVE-2022-24545: Undefined Security Weakness
Windows Kerberos Remote Code Execution Vulnerability...
CVE-2022-24481: Undefined Security Weakness
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-26903: Undefined Security Weakness
Windows Graphics Component Remote Code Execution Vulnerability...
CVE-2022-24483: Undefined Security Weakness
Windows Kernel Information Disclosure Vulnerability...
CVE-2022-20720: Improper Limitation of a Pathname to a Restricted Directory
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...
CVE-2022-27257: Undefined Security Weakness
A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...
CVE-2022-26802: Undefined Security Weakness
Windows Print Spooler Elevation of Privilege Vulnerability...
CVE-2022-26827: Concurrent Execution using Shared Resource with Improper Synchronization
Windows File Server Resource Management Service Elevation of Privilege Vulnerability...
CVE-2022-23257: Undefined Security Weakness
Windows Hyper-V Remote Code Execution Vulnerability...
CVE-2021-36205: Incomplete Cleanup
Under certain circumstances the session token is not cleared on logout...
CVE-2022-26788: Undefined Security Weakness
PowerShell Elevation of Privilege Vulnerability...
CVE-2022-20724: Improper Limitation of a Pathname to a Restricted Directory
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...
CVE-2022-24491: Undefined Security Weakness
Windows Network File System Remote Code Execution Vulnerability...
CVE-2022-26824: Undefined Security Weakness
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-28049: NULL Pointer Dereference
NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...
CVE-2021-44481: Improper Input Validation
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...
CVE-2022-24486: Undefined Security Weakness
Windows Kerberos Elevation of Privilege Vulnerability...
CVE-2021-44510: Incorrect Calculation of Buffer Size
An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the...
CVE-2022-20681: Incorrect Privilege Assignment
A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerability is due to insufficient validatio...
CVE-2022-27451: Undefined Security Weakness
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/fieldconv.cc...
CVE-2022-27817: Exposure of Resource to Wrong Sphere
SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality...
CVE-2021-21944: Heap-based Buffer Overflow
Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place tryi...
CVE-2020-16238: Improper Privilege Management
A vulnerability in the configuration import mechanism of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with command line access to the underlying Linux system to escalate privileges to the root user...
CVE-2021-44354: Improper Input Validation
Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2020-25166: Improper Verification of Cryptographic Signature
An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper...
CVE-2021-40424: Out-of-bounds Read
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL...
CVE-2022-1279: Missing Cryptographic Step
A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...
CVE-2022-25166: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in the OpenVPN configuration file when referencing file paths for parameters such as auth-user-pass. When this file is imported and the client attempts to validate the file path, it performs an open...
CVE-2021-21948: Heap-based Buffer Overflow
A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2022-27447: Use After Free
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binarystring::freebuffer at /sql/sqlstring.h...
CVE-2022-22957: Deserialization of Untrusted Data
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities CVE-2022-22957 & CVE-2022-22958. A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote...
CVE-2020-29653: Improper Neutralization of Input During Web Page Generation
Froxlor through 0.10.22 does not perform validation on user input passed in the customermail GET parameter. The value of this parameter is reflected in the login webpage, allowing the injection of arbitrary HTML tags...
CVE-2022-24828: Improper Input Validation
Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call VcsDriver::getFileContent can have a code injection vulnerability if the user can control the $file or $identifier argument. This leads to a vulnerability on packagist.org for example where...
CVE-2022-29156: Double Free
drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrscltdevrelease...
CVE-2022-1280: Use After Free
A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak...
CVE-2021-39795: Undefined Security Weakness
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Pulled from Android ASB2022-04 publication https://source.android.com/security/bulletin/2022-04-01 due to a functional regression. We will re-release this CVE at a future...
CVE-2022-28033: Improper Neutralization of Special Elements used in an SQL Command
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminuploads.php...
CVE-2022-27381: Improper Neutralization of Special Elements used in an SQL Command
An issue in the component Field::setdefault of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...
CVE-2022-23450: Deserialization of Untrusted Data
A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the...
CVE-2022-21228: Stack-based Buffer Overflow
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...
CVE-2022-29046: Improper Neutralization of Input During Web Page Generation
Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags and more parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...