Archive
16 February 2022
Vulnerabilities first published on this day (UTC), newest first.
95 results · Feed
-
Medium 5.5
Adobe Illustrator Out-of-bounds Read could lead to Memory leak
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…
-
Medium 5.5
Adobe Illustrator Out-of-bounds Read could lead to Memory leak
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…
-
Medium 5.5
Adobe Illustrator Out-of-bounds Read could lead to Memory leak
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…
-
High 7.8
Adobe Illustrator Out-of-bounds Write could lead to Arbitrary code execution
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio…
-
High 7.8
Adobe Illustrator Buffer Overflow could lead to Arbitrary code execution
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted malicious file, potentially resulting in arbitrary code execution in the context of the current user…
-
Medium 5.5
Adobe Illustrator NULL Pointer Dereference Application denial-of-service
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the …
-
Medium 5.5
Adobe Illustrator Out-of-bounds Read could lead to Memory leak
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…
-
Medium 5.5
Adobe Illustrator Out-of-bounds Read could lead to Memory leak
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…
-
High 7.3
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …
-
High 7.8
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …
-
High 7.8
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …
-
High 7.8
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …
-
Medium 6.5
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privile…
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Medium 6.6
MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters
MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users
-
Critical 9.9
Remote Code Execution by by Contributor+ users via WordPress gutenberg block
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.
-
Critical 9.9
Remote Code Execution by Subscriber+ users via WordPress shortcode
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.
-
High 7.2
Fancy Product Designer <= 4.7.4 Admin+ SQL Injection
The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the ID parameter found in the ~/inc/api/class-view.php file which allows attackers with administrative level permissions to inject …
-
Critical 9.9
Remote Code Execution by by Contributor+ users via WordPress metabox
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.
-
Critical 9.8CVE-2022-0513 EPSS 53%
WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the ~/includes/class-wp-statistics-exclusion.php file which allows attackers without authentication …
-
Unscored —
A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers ud…
-
High 7.8
Vulnerability in Snow Inventory Java Scanner
A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges. This issue affects: SNOW Snow Inventory Java Scanner 1.0
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in th…
-
Unscored —
A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created Serv…
-
Unscored —
ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to …
-
Unscored —
VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are hand…
-
Unscored —
VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. …
-
Unscored —
VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor…
-
Unscored —
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious act…
-
High 8.8
Remote code execution in Valmet DNA before Collection 2021
A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021.
-
Unscored —
A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in the goform/se…
-
Unscored —
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the use…
-
High 8.4
Use After Free in radareorg/radare2
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
-
High 8.4
Use of Out-of-range Pointer Offset in mruby/mruby
Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.
-
Medium 5.3
Authorization Bypass Through User-Controlled Key in medialize/uri.js
Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.