Archive
February 2022
Vulnerabilities first published in this month (UTC), newest first.
1,963 results · Feed
-
Unscored —
There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerabil…
-
Unscored —
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicio…
-
Unscored —
There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerab…
-
Unscored —
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicio…
-
Unscored —
There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code inje…
-
Unscored —
There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerab…
-
Unscored —
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicio…
-
Unscored —
There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may…
-
Unscored —
There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of…
-
Unscored —
There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect servic…
-
Unscored —
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause…
-
Unscored —
There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity.
-
Unscored —
There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availabil…
-
Unscored —
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause…
-
Unscored —
The interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful exploitation of this vuln…
-
Unscored —
There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vuln…
-
Unscored —
The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of thi…
-
Unscored —
The interface of a certain HarmonyOS module has a UAF vulnerability. Successful exploitation of this vulnerability may …
-
Unscored —
Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to …
-
High 8.1
Gabia Firstmall remote code execution vulnerability
This issues due to insufficient verification of the various input values from user’s input. The vulnerability allows remote attackers to execute malicious code in Firstmall via navercheckout_add function.
-
High 7.5
ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext
The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.
-
High 7.5
ICSA-22-053-01 GE Proficy CIMPLICITY-IPM
Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server i…
-
High 7.8
ICSA-22-055-01 FATEK Automation FvDesigner
The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code
-
High 7.8
ICSA-22-055-01 FATEK Automation FvDesigner
The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution.
-
High 7.8
ICSA-22-055-01 FATEK Automation FvDesigner
The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution.
-
Medium 5.9
Use-after-free vulnerability in ESET products for Linux
Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.
-
Medium 6.2
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd dae…
-
Unscored —
JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1,…
-
Unscored —
JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon.
-
Unscored —
In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possib…
-
Unscored —
In JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user) upon opening a projec…
-
Unscored —
JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page.
-
Unscored —
In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions.
-
Unscored —CVE-2022-24342 Public exploit
In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.
-
Unscored —
In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the e…
-
Unscored —
In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.
-
Unscored —
JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.
-
Unscored —
JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS.
-
Unscored —
In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked appropriate permissio…
-
Unscored —
In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to …