Archive
10 May 2022
Vulnerabilities first published on this day (UTC), newest first.
34 results · Clear filters · Feed
-
Medium 5.5
Windows Print Spooler Information Disclosure Vulnerability
Windows Print Spooler Information Disclosure Vulnerability
-
Medium 6.5
Windows Clustered Shared Volume Information Disclosure Vulnerability
Windows Clustered Shared Volume Information Disclosure Vulnerability
-
Medium 4.2
BitLocker Security Feature Bypass Vulnerability
BitLocker Security Feature Bypass Vulnerability
-
Medium 6.5
Windows Clustered Shared Volume Information Disclosure Vulnerability
Windows Clustered Shared Volume Information Disclosure Vulnerability
-
Medium 6.5
Windows Clustered Shared Volume Information Disclosure Vulnerability
Windows Clustered Shared Volume Information Disclosure Vulnerability
-
Medium 6.5
Windows WLAN AutoConfig Service Denial of Service Vulnerability
Windows WLAN AutoConfig Service Denial of Service Vulnerability
-
Medium 6.5
Windows Clustered Shared Volume Information Disclosure Vulnerability
Windows Clustered Shared Volume Information Disclosure Vulnerability
-
Medium 4.7
Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
-
Medium 5.5
Windows Print Spooler Information Disclosure Vulnerability
Windows Print Spooler Information Disclosure Vulnerability
-
Medium 6.5
Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
-
Medium 5.5
Microsoft Office Security Feature Bypass Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
-
Medium 5.5
Windows Failover Cluster Information Disclosure Vulnerability
Windows Failover Cluster Information Disclosure Vulnerability
-
Medium 6.5
Remote Desktop Protocol Client Information Disclosure Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
-
Medium 6.5
Windows Server Service Information Disclosure Vulnerability
Windows Server Service Information Disclosure Vulnerability
-
Medium 6.5
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
-
Medium 6.5
Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Windows NTFS Information Disclosure Vulnerability
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 4.1
Windows Hyper-V Security Feature Bypass Vulnerability
Windows Hyper-V Security Feature Bypass Vulnerability
-
Medium 5.6
Windows Hyper-V Denial of Service Vulnerability
Windows Hyper-V Denial of Service Vulnerability
-
Medium 6.5
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
-
Medium 5.5
Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
-
Medium 4.3
Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting …
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting …
-
Medium 6.1
WP JS <= 2.0.6 - Reflected Cross-Site Scripting
The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6.
-
Medium 4.3
Ultimate Member <= 2.3.1 - Arbitrary Redirect
The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied URLs in the social fields of the Profile Page, which makes it possible for attackers to redirect unsuspecting victims in versions up to, a…
-
Medium 6.6CVE-2022-1476 EPSS 46%
All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts
The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the ~/lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploit…
-
Medium 5.9
IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on th…
-
Medium 4.8
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows…
-
Medium 5.3
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated …
-
Medium 5.3
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected de…
-
Medium 6.5
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input i…
-
Medium 4.3
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected de…
-
Medium 6.6
Buffer Over-read in function find_next_quote in vim/vim
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution