Archive
June 2022
Vulnerabilities first published in this month (UTC), newest first.
428 results · Clear filters · Feed
-
High 7.8
Drive Composer Link Following Local Privilege Escalation Vulnerability
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privile…
-
High 7.8
Adobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code Execution
Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of…
-
High 7.8
Adobe Prelude Corruption could lead to Arbitrary code execution
Adobe Prelude version 22.1.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to …
-
High 7.1
OpenNMS Stored XSS via SNMP Agent Data
OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent supplied data. By creating a malicious SNMP 'sysName' or 'sysContact' response, an attacker can store an XSS payload which will trigger when a us…
-
High 7.1
OpenNMS Stored XSS via SNMP Trap Alerts
OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the even…
-
High 7.4
Cisco IP Phone Duplicate Key Vulnerability
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager (CUCM) is in secure mode. This vulnerability is due to improper key generation during th…
-
High 7.7
Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability
A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an authenticated, remote attacker to retrieve sensitive information…
-
High 7.8
Adobe InDesign crashes when parsing the GIF file
Access of Memory Location After End of Buffer (CWE-788)
-
High 7.8
Adobe InDesign crashes when parsing the TIF file
Access of Memory Location After End of Buffer (CWE-788
-
High 7.8
Adobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. U…
-
High 7.5
Splunk Enterprise deployment servers allow unauthenticated forwarder bundle downloads
Splunk Enterprise deployment servers in versions before 9.0 allow unauthenticated downloading of forwarder bundles. Remediation requires you to update the deployment server to version 9.0 and Configure authentication for deployment servers and clients (https:…
-
High 8.1
Splunk Enterprise lacked TLS host name validation
Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default. Splunk peer communications configured properly with va…
-
High 8.1
Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default
Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default. Splunk peer communications configured properly with va…
-
High 7.4
Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default
The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority (CA) certificate stores by default in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions bef…
-
High 8.8CVE-2022-33140 Public exploit
Improper Neutralization of Command Elements in Shell User Group Provider
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUs…
-
High 8.8
Apache Hadoop Privilege escalation vulnerability
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.
-
High 7.5
SMBv3 FileNormalizedNameInformation NULL Pointer Dereference
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD…
-
High 7.1
Known or guessable hidden files may be accessed in Jupyter Server
Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of `root_dir` that contains the starting user's home…
-
High 7.5
Regular expression denial of service in Delight Nashorn Sandbox
An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service (DoS) attack.
-
High 8.4
Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT…
-
High 7.8
Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon…
-
High 8.4
Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute,…
-
High 8.8
Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Conn…
-
High 8.4
A user with user level permission can access graphics protected region due to improper access control in register confi…
-
High 7.5
Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdr…
-
High 8.4
Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message…
-
High 8.4
Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Conne…
-
High 8.4
Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon …
-
High 8.2
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snap…
-
High 7.5
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snap…
-
High 7.5
Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdra…
-
High 7.1
Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Compu…
-
High 8.4
Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, …
-
High 7.5CVE-2021-30327 Public exploit
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdra…
-
High 8.4
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control…
-
High 7.8
Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdrag…
-
High 8.4CVE-2022-22071 Exploited
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in pro…
KEV Dec 5, 2023 -
High 8.4
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Sn…
-
High 7.5
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Sna…
-
High 7.5
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, …