Archive
1 August 2022
Vulnerabilities first published on this day (UTC), newest first.
111 results · Feed
-
Medium 4.3
IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and …
-
Unscored —
Novel "ghost domain names" attack by updating almost expired delegation information
NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation informati…
-
Unscored —
Novel "ghost domain names" attack by introducing subdomain delegations
NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver …
-
Medium 5.9
Inefficient Regular Expression Complexity in node-fetch/node-fetch
Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.
-
Critical 9.8
Improper Authorization in kromitgmbh/titra
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.
-
High 7.8
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.
-
High 7.3
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
-
Medium 6.9
Cross-site Scripting (XSS) - Reflected in beancount/fava
Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.
-
High 8.8
File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the fi…
-
Critical 9.8
BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-f…
-
Unscored —
An issue in \Roaming\Mango\Plugins of University of Texas Multi-image Analysis GUI (Mango) 4.1 allows attackers to esca…
-
High 7.5
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification o…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…
-
Unscored —
In emi mpu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information …
-
Unscored —
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privi…
-
Unscored —
In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Unscored —
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privi…
-
Unscored —
In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Unscored —
In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Unscored —
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privi…
-
Unscored —
In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of …
-
Unscored —
In cta, there is a possible way to write permission usage records of an app due to a missing permission check. This cou…
-
Unscored —
In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of p…
-
Unscored —
In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Unscored —
In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Unscored —
In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Unscored —
In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Unscored —
In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Unscored —CVE-2022-21789 Public exploit
In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of pri…
-
Unscored —
In httpclient, there is a possible out of bounds write due to uninitialized data. This could lead to remote escalation …
-
High 7.2
WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability
Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
-
Low 3.4
WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.