Archive
5 August 2022
Vulnerabilities first published on this day (UTC), newest first.
169 results · Feed
-
Critical 9.1
Incorrect Privilege Assignment in hestiacp/hestiacp
Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6.
-
Unscored —
A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06. This occurs in the admin port…
-
Critical 9.8CVE-2022-21186 EPSS 26%
Arbitrary Command Injection
The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.
-
Unscored —
Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8.
-
Unscored —
The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008.
-
Unscored —
A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table pe…
-
Unscored —
A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get th…
-
Unscored —
A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw al…
-
Critical 9.8
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…