Archive
29 August 2022
Vulnerabilities first published on this day (UTC), newest first.
102 results · Feed
-
Unscored —
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use…
-
Unscored —CVE-2021-41784 Public exploit
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use…
-
Unscored —
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use…
-
Unscored —
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference in…
-
Critical 9.8
NVFLARE unsafe deserialization due to Pickle
NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrit…
-
Unscored —
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly rela…
-
Unscored —
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not al…
-
Unscored —
Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_…
-
Unscored —
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
-
Unscored —
Advancecomp v2.3 contains a segmentation fault.
-
Unscored —
Advancecomp v2.3 was discovered to contain a segmentation fault.
-
Unscored —
Advancecomp v2.3 was discovered to contain a segmentation fault.
-
Unscored —
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
-
Unscored —
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
-
Unscored —CVE-2022-1043 Public exploit
A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to co…
-
Unscored —
A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Th…
-
High 7.5
A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radi…
-
Medium 6.1
jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled
jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that l…
-
Unscored —
A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race conditio…
-
Medium 5.5
LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a …
-
Unscored —CVE-2022-37177 Public exploit
HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by t…
-
Unscored —
A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder…