Archive
25 October 2022
Vulnerabilities first published on this day (UTC), newest first.
123 results · Feed
-
Medium —
matrix-sdk 0.6.0 logs access tokens
When sending Matrix requests using an affected version of `matrix-sdk` in an application that writes logs using `tracing-subscriber` (in a way that includes fields of tracing spans such as `tracing_subscriber`s default text output from the `fmt` module), thes…
-
Unscored —CVE-2022-27913 Public exploit
[20221002] - Core - RXSS through reflection of user input in headings
An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.
-
Unscored —
[20221001] - Core - Debug Mode leaks full request payloads including passwords
An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests.
-
High 7.8
Adobe Illustrator PCX File Parsing Memory Corruption Remote Code Execution Vulnerability
Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…
-
High 7.8
Adobe Illustrator CDR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this…
-
High 8.2
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode …
-
High 8.2
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode …
-
High 8.2
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode …
-
High 8.2
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode …
-
High 7.1
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In…
-
High 7.1
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In…
-
High 7.1
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In…
-
High 7.1
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In…
-
High 8.2
Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All…
-
High 8.2
Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All…
-
High 8.2
Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All…
-
High 8.2
Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All…
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Medium 4.9
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. …
-
Critical 9.8
A format string injection vulnerability exists in the XCMD getVarHA functionality of abode systems, inc. iota All-In-On…
-
Critical 9.1
An OS command injection vulnerability exists in the web_server /action/import_authorized_keys/ functionality of Robuste…
-
Medium 6.7
A firmware update vulnerability exists in the sysupgrade functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-…
-
High 8.2
A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc.…
-
Medium 4.9
A directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1.16. A sp…
-
Critical 10.0
Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Sy…
-
Critical 10.0
Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Sy…
-
Critical 10.0
Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Sy…
-
Critical 10.0
Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Sy…
-
Critical 10.0
Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In…
-
Critical 10.0
Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In…
-
Critical 10.0
Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In…