Archive
19 September 2022
Vulnerabilities first published on this day (UTC), newest first.
122 results · Feed
-
Unscored —
Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value…
-
High 7.5
The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking
-
Unscored —
Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component…
-
Unscored —
An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint…
-
Unscored —
An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints.
-
Medium 6.5
An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific end…
-
Medium 6.1
An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints.
-
High 7.8
Adobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio…
-
Medium 5.5
Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation…
-
High 7.8
Adobe Bridge SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio…
-
Medium 5.5
Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation…
-
High 7.8
Adobe Bridge SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vul…
-
High 7.8
Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…
-
High 7.8
Adobe Bridge SVG File Parsing Use-After-Free Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a …
-
High 7.8
Adobe Bridge SGI File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vul…
-
High 7.8
Adobe Bridge SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vul…
-
High 7.8
Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…
-
High 7.8
Adobe Bridge MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vul…
-
High 7.8
Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…
-
High 8.8CVE-2022-38577 Public exploit
ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability …
-
Critical 9.8
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third par…
-
Unscored —
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.…
-
Unscored —
The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third…
-
Unscored —
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third p…
-
Unscored —
The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third p…
-
Unscored —CVE-2022-37203 Public exploit
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filte…
-
Unscored —
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third pa…
-
Unscored —
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id88, UserForm:j_id…
-
Unscored —
The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third pa…
-
Unscored —
The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation.
-
Unscored —
The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party…
-
Unscored —
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a thi…
-
Unscored —
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a thi…
-
Unscored —
The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third part…