Archive
August 2022
Vulnerabilities first published in this month (UTC), newest first.
2,333 results · Feed
-
Unscored —
VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with lo…
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0246.
-
Unscored —
A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by d…
-
Medium 6.5
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multip…
-
Unscored —
An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control…
-
Unscored —
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this …
-
Unscored —CVE-2021-3975 Public exploit
A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is call…
-
Unscored —
A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned b…
-
Unscored —
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time…
-
Medium 5.5
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmou…
-
Unscored —
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmou…
-
Unscored —
A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a …
-
Unscored —
An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the …
-
Unscored —
A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be p…
-
Unscored —
A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed…
-
Unscored —
A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with perm…
-
Unscored —
D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cau…
-
Medium 4.5
IBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity certificate that may caus…
-
Unscored —
HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelin…
-
Unscored —
HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack …
-
Unscored —
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2…
-
High 8.3
A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.…
-
High 8.3
A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.…
-
High 8.3
A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.…
-
High 8.3
A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.…
-
High 7.5
An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f…
-
High 7.5
An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f…
-
Critical 9.6CVE-2022-32772 Scanner template
A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master…
-
Critical 9.6CVE-2022-32771 Scanner template
A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master…
-
Critical 9.6CVE-2022-32770 Scanner template
A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master…
-
Medium 4.8
Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and d…
-
Medium 4.8
Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and d…
-
Medium 6.5
An information disclosure vulnerability exists in the aVideoEncoderReceiveImage functionality of WWBN AVideo 11.6 and d…
-
Critical 9.9CVE-2022-32572 EPSS 25%
An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master…
-
High 7.2
An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An att…
-
Critical 9.6CVE-2022-30690 EPSS 84%
A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master comm…
-
High 8.8
A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3…
-
Critical 9.9CVE-2022-30547 EPSS 65%
A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commi…
-
Critical 9.9CVE-2022-30534 EPSS 76%
An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev m…
-
High 8.8
A cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master commit 3f7c0364. A speciall…