Archive
15 September 2022
Vulnerabilities first published on this day (UTC), newest first.
89 results · Feed
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…
-
High 7.0
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…
-
High 7.0
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…
-
Unscored —
Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.
-
Unscored —CVE-2022-37201 Public exploit
JFinal CMS 5.1.0 is vulnerable to SQL Injection.
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of libmpdem…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/dem…
-
High 7.5
Vulnerability in Milesight Video Management Systems (VMS)
This vulnerability exists in Milesight Video Management Systems (VMS), all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a spec…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639. This affe…
-
Unscored —CVE-2022-37207 Public exploit
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filter…
-
Unscored —
Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability.
-
Unscored —
The login form /Login in ECi Printanista Hub (formerly FMAudit Printscout) before 5.5.2 (July 2023) performs expensive …
-
Medium 5.8
Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.6.
-
High 7.6
Improper Initialization vulnerability in local server authentication logic
Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. This issue affects: EZVIZ CS-C6N-A0-1C2WFR versions prior t…
-
Critical 9.9
Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component
Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This i…
-
Unscored —
An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allo…
-
Critical 9.8
steal vulnerable to Prototype Pollution via requestedVersion variable
Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js.
-
Critical 9.8
steal vulnerable to Prototype Pollution via key variable in babel.js
Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.
-
Unscored —
An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated p…
-
Unscored —CVE-2022-38789 Public exploit
An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and…
-
Critical 9.4
Misinterpretation of Input in ionicabizau/parse-url
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.
-
High 8.8
Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.
-
Unscored —
OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601…
-
Low —
Python-TUF vulnerable to incorrect threshold signature computation for new root metadata
### Impact The function `_verify_root_self_signed()`, introduced in [v0.14.0](https://github.com/theupdateframework/tuf/releases/tag/v0.14.0), and which verifies self-signatures in a new root metadata file, counted multiple signatures by any new root key towa…
-
Medium 6.1
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
> ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) ### Problem Due to a parsing issue in upstream package [`masterminds/html5`](https://packagist.org/packages/masterminds/html5), malicious markup used in a sequence with sp…
-
Unscored —
An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_DescriptorListWriter::Act…
-
Unscored —
An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in AP4_CttsAtom::Create in Core/Ap4C…
-
Unscored —
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4_StdcFileByteStream::…
-
High —
Pageflow vulnerable to insecure direct object reference in membership update endpoint
### Impact Pageflow has a membership edit feature which allows users to edit the roles of user memberships associated with an account that they have the `manager` role to (including their own). While the `Entity` dropdown select field is greyed out in the UI,…
-
High —
Pageflow vulnerable to sensitive user data extraction via Ransack query injection
### Impact The attack allows extracting sensitive properties of database objects that are associated with users or entries belonging to an account that the attacker has access to. Pageflow uses the `ActiveAdmin` Ruby library to provide some management feature…
-
Unscored —
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ed…
-
Unscored —
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ed…
-
Critical 9.8CVE-2022-38352 EPSS 22%
ThinkPHP deserialization vulnerability
ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload.
-
Unscored —
Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_…
-
High 7.5
Uncontrolled Resource Consumption in cmark-gfm
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior to 0.29.0.gfm.6 a polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent d…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/m…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdem…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpde…