Archive
March 2022
Vulnerabilities first published in this month (UTC), newest first.
2,085 results · Feed
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a malicio…
-
Unscored —CVE-2022-22600 Public exploit
The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, ma…
-
Unscored —
Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 a…
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Mo…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.…
-
Unscored —
A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 a…
-
Unscored —
An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 15.4 and iPad…
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPad…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.3 and iPadOS 15.3, w…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, …
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.2. A ma…
-
Unscored —
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, wat…
-
Unscored —
A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 15.2.1 and iPadOS …
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A…
-
Critical 9.8
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3…
KEV Jan 28, 2022 -
Unscored —
An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitizatio…
-
Unscored —
A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, m…
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watch…
-
Unscored —
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadO…
-
Unscored —
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.…
-
Unscored —
A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0_CBN4, and v7.4.2h could allow…
-
Unscored —
The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statement…
-
High 7.8
Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
-
High 7.8
Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
-
High 7.5
Syltek Insufficient Verification of Data Authenticity
Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification.
-
Unscored —
An issue was discovered in MISP before 2.4.156. app/View/Users/terms.ctp allows Local File Inclusion via the custom ter…
-
Unscored —
An issue was discovered in MISP before 2.4.156. A malicious site administrator could store an XSS payload in the custom…
-
Unscored —
An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CL…
-
Unscored —
An issue was discovered in MISP before 2.4.156. An SVG org logo (which may contain JavaScript) is not forbidden by defa…
-
Medium 4.9
IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user cr…
-
Medium 6.5
IBM Engineering Requirements Quality Assistant prior to 3.1.3 could allow an authenticated user to cause a denial of se…
-
High 7.5
Improper Verification of Cryptographic Signature in `node-forge`
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. …
-
Medium 5.3
Improper Verification of Cryptographic Signature in `node-forge`
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not properly check `DigestInfo` for a proper ASN.1 structure. This can lead to succ…
-
High 7.5
Improper Verification of Cryptographic Signature in node-forge
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structur…