Archive
3 October 2022
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Medium 6.5
LIEF vulnerable to denial of service through segmentation fault
A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.
-
High 7.5CVE-2022-38817 Scanner template
Dapr Dashboard vulnerable to Incorrect Access Control
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
-
Medium 5.4
OrchardCore - HTML Injection
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.
-
Unscored —
DedeCMS 5.7.98 has a file upload vulnerability in the background.
-
Unscored —
A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Auto…
-
Unscored —
A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruptio…
-
Medium 6.5CVE-2022-36551 Public exploit
Heartex - Label Studio Community Edition vulnerable to SSRF in the Data Import module
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is enabled by default in…
-
High 8.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
KEV Sep 30, 2022 -
Unscored —
A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruptio…
-
High 8.0
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
KEV Sep 30, 2022