Archive
25 October 2022
Vulnerabilities first published on this day (UTC), newest first.
45 results · Clear filters · Feed
-
High 7.8
Adobe Illustrator PCX File Parsing Memory Corruption Remote Code Execution Vulnerability
Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…
-
High 7.8
Adobe Illustrator CDR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this…
-
High 8.2
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode …
-
High 8.2
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode …
-
High 8.2
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode …
-
High 8.2
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode …
-
High 7.1
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In…
-
High 7.1
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In…
-
High 7.1
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In…
-
High 7.1
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In…
-
High 8.2
Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All…
-
High 8.2
Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All…
-
High 8.2
Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All…
-
High 8.2
Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All…
-
High 8.2
A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc.…
-
High 8.6
A denial of service vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. iota All-In-One Secur…
-
High 8.0
An OS command injection vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode System…
-
High 7.5
A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. …
-
High 8.1
An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode Systems, Inc. iota Al…
-
High 8.6
An authentication bypass vulnerability exists in the web interface /action/factory* functionality of Abode Systems, Inc…
-
High 8.0
An os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, I…
-
High 7.4
Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Ma…
-
High 8.8
A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a loca…
-
High 7.8
A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn…
-
High 7.8
Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to proc…
-
High 7.8
A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8…
-
High 8.8
A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allo…
-
High 7.2
A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a rem…
-
High 8.8
Usermin through 1.850 allows a remote authenticated user to execute OS commands via command injection in a filename for…
-
High 8.8
kartverket/github-workflows's run-terraform allows for RCE via terraform plan
kartverket/github-workflows are shared reusable workflows for GitHub Actions. Prior to version 2.7.5, all users of the `run-terraform` reusable workflow from the kartverket/github-workflows repo are affected by a code injection vulnerability. A malicious acto…
-
High 8.1
Improper Control of Generation of Code ('Code Injection') in Azure CLI
Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have …
-
High 8.8
GitHub Actions Runner vulnerable to Docker Command Escaping
GitHub Actions Runner is the application that runs a job from a GitHub Actions workflow. The actions runner invokes the docker cli directly in order to run job containers, service containers, or container actions. A bug in the logic for how the environment is…
-
High 8.8
Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could all…
-
High 7.5CVE-2022-38870 Scanner template
Free5gc v3.2.1 is vulnerable to Information disclosure.
-
High 8.8
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are misha…
KEV Mar 30, 2023 -
High 8.8
A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticate…
-
High 8.8
A vulnerability in the MiCollab Client API of Mitel MiCollab 9.1.3 through 9.5.0.101 could allow an authenticated attac…
-
High 8.8
Blog2Social < 6.9.10 - Subscriber+ SQLi
The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers
-
High 7.2
Form Maker by 10Web < 1.15.6 - Admin+ SQLI
The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
-
High 7.2
Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi
The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using them in a SQL statement, which could lead to SQL injection exploitable by high privilege users such as admin