Archive
18 February 2022
Vulnerabilities first published on this day (UTC), newest first.
223 results · Feed
-
Unscored —
Scoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown editor is vulnerable t…
-
Critical 9.4CVE-2022-0660 Scanner template
Generation of Error Message Containing Sensitive Information in microweber/microweber
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
-
High 8.2
Process Control vulnerability in Bitdefender Antivirus Plus
A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitd…
-
High 7.5CVE-2022-25314 Public exploit
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
-
Critical 9.8CVE-2022-25315 Public exploit
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
-
Medium 6.5CVE-2022-25313 Public exploit
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth…
-
Unscored —CVE-2021-46108 Public exploit
D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance confi…
-
Unscored —
TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable…
-
Unscored —
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only doma…
-
Unscored —
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentica…
-
Unscored —
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacke…
-
Unscored —
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…
-
Medium 4.3
Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via…
-
Unscored —
An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit a…
-
Unscored —
An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.
-
Unscored —
An issue was discovered in Cerebrate through 1.4. genericForm allows reflected XSS in form descriptions via a user-cont…
-
Unscored —
An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.
-
Unscored —
An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.
-
Unscored —
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plai…
-
Unscored —
An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write …
-
Unscored —
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker c…
-
Unscored —
An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces …
-
Unscored —
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the …