Archive
23 September 2022
Vulnerabilities first published on this day (UTC), newest first.
100 results · Clear filters · Feed
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPad…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5. An …
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 1…
-
Medium 6.7CVE-2022-32832 Public exploit
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 1…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macO…
-
Medium 5.5
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 1…
-
Medium 6.5
The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 1…
-
Medium 5.5
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6,…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5. An app may be able t…
-
Medium 5.9
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-00…
-
Medium 5.5
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur …
-
Medium 5.5
The issue was addressed with improved handling of caches. This issue is fixed in Security Update 2022-005 Catalina, mac…
-
Medium 5.5
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in Securi…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5. An app may be able to byp…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An app may gain unauthori…
-
Medium 4.4
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS …
-
Medium 5.5
A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Sec…
-
Medium 4.4
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4. An app with root pri…
-
Medium 5.5
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in macOS …
-
Medium 5.5
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerabilit…
-
Medium 5.4
WordPress Kraken.io Image Optimizer plugin <= 2.6.5 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress.
-
Medium 5.4
WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability Backup Scheduler plugin <= 1.5.13 at WordPress.
-
Medium 5.4
WordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Seriously Simple Podcasting plugin <= 2.16.0 at WordPress, leading to plugin settings change.
-
Medium 5.4
WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 404 errors and redirection history.
-
Medium 6.5
WordPress MailOptin plugin <= 1.2.49.0 - Unauthenticated Optin Campaign Cache Deletion vulnerability
Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin <= 1.2.49.0 at WordPress.
-
Medium 4.3
An information disclosure vulnerability exists in Rocket.Chat <v4.7.5 which allowed the "users.list" REST endpoint gets…
-
Medium 6.5
An information disclosure vulnerability exists in Rocket.Chat <v5 due to the getUserMentionsByChannel meteor server met…
-
Medium 5.3
A cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token being leaked in plaintext…
-
Medium 6.8
An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with p…
-
Medium 4.3
A information disclosure vulnerability exists in Rocket.chat <v5, <v4.8.2 and <v4.7.5 where the lack of ACL checks in t…
-
Medium 6.5
A cleartext transmission of sensitive information exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 relating to Oauth toke…
-
Medium 4.3
A information disclosure vulnerability exists in Rockert.Chat <v5 due to /api/v1/chat.getThreadsList lack of sanitizati…
-
Medium 4.3
An information disclosure vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 since the getReadReceipts Meteor…
-
Medium 4.3
An improper access control vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 due to input data in the getUse…
-
Medium 4.3
An information disclosure vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 due to the actionLinkHandler met…
-
Medium 4.3
A information disclosure vulnerability exists in Rocket.Chat <v5 where the getUserMentionsByChannel meteor server metho…
-
Medium 5.4
A cross-site scripting vulnerability exists in Rocket.chat <v5 due to style injection in the complete chat window, an a…
-
Medium 4.3
A privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate privileges for any aut…
-
Medium 4.3
A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 in …
-
Medium 4.3
Denial-of-Service (DoS) Vulnerability
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine