Archive
26 May 2022
Vulnerabilities first published on this day (UTC), newest first.
157 results · Feed
-
Unscored —
An uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local…
-
Unscored —
An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local …
-
Unscored —
Trend Micro Maximum Security 2022 is vulnerable to a link following vulnerability that could allow a low privileged loc…
-
Unscored —
EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend …
-
High 7.8
Arbitrary command execution in Minidoc
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.
-
Unscored —
An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted coo…
-
Unscored —CVE-2022-29632 EPSS 17%
An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attack…
-
Medium 6.1
TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP
This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec …
-
Medium 6.8
TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP
This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec s…
-
Critical 9.8
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An att…
-
Critical 9.8
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catal…
-
High 7.8
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local …
-
High 7.1
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An appli…
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An …
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, …
-
High 7.8
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-0…
-
High 7.8
A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004…
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, wat…
-
Medium 5.5
The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 1…
-
Medium 5.5CVE-2022-26766 Public exploit
A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 1…
-
Medium 4.7
A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monte…
-
Medium 4.7
A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS …
-
High 7.8CVE-2022-26763 Public exploit
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 a…
-
Critical 9.6
Archer Platform 6.3 before 6.11 (6.11.0.0) contains an Improper Access Control Vulnerability within SSO ADFS functional…
-
High 7.8
A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 …
-
Medium 6.5
The REST API in Archer Platform 6.x before 6.11 (6.11.0.0) contains an Authorization Bypass Vulnerability. A remote aut…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iP…
-
Unscored —
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-…
-
Unscored —
This issue was addressed with improved environment sanitization. This issue is fixed in Security Update 2022-004 Catali…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windo…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated p…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, mac…
-
Unscored —
Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint. T…
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.6. A malici…