Archive
10 June 2022
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
High 8.1
Deserialization of Untrusted Data
The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote serve…
-
Unscored —CVE-2022-32981 Public exploit
An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in p…
-
Unscored —CVE-2018-17240 Public exploit
There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attack…
-
Unscored —CVE-2022-31402 Public exploit
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php.
-
Unscored —CVE-2021-44117 Public exploit
A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/s…
-
Unscored —CVE-2021-44582 Public exploit
A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remo…
-
Unscored —CVE-2022-27502 Public exploit
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operat…