Archive
23 September 2022
Vulnerabilities first published on this day (UTC), newest first.
58 results · Clear filters · Feed
-
High 7.7
Caddy-SSH vulnerable to Authorization Bypass due to incorrect usage of PAM library
Not invoking a call to `pam_acct_mgmt` after a call to `pam_authenticate` to check the validity of a login can lead to an authorization bypass. ### Impact #### Exploitability The attack can be carried over the network. A complex non-standard configuration or …
-
High 8.8CVE-2022-22629 Public exploit
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari…
-
High 7.1
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-0…
-
High 7.1
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Cata…
-
High 7.8
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-0…
-
High 7.8
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big …
-
High 7.8
A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15…
-
High 7.8
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, m…
-
High 7.8
This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 1…
-
High 7.1
This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS B…
-
High 7.8
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 1…
-
High 7.8
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5. An app may be able to gain r…
-
High 7.1
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-0…
-
High 7.1
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur …
-
High 8.8
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 1…
-
High 7.1
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-0…
-
High 7.8
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. …
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5. An …
-
High 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15…
-
High 7.5
This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5,…
-
High 7.1
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. P…
-
High 7.1
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safar…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, …
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Saf…
-
High 8.8
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, wa…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 1…
-
High 7.5
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability…
-
High 7.5
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability…
-
High 7.5
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnera…
-
High 7.5
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability…
-
High 7.5
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability…
-
High 7.5
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnera…
-
High 7.8
Measuresoft ScadaPro Server Improper Access Control
The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.
-
High 8.8
A SQL injection vulnerability exists in Rocket.Chat <v3.18.6, <v4.4.4 and <v4.7.3 which can allow an attacker to retrie…
-
High 8.2
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the …
-
High 7.5
Sensitive Information Disclosure Vulnerability in Tacitine Firewall
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote att…
-
High 7.1
IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when process…
-
High 8.2
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver…