Archive
1 November 2022
Vulnerabilities first published on this day (UTC), newest first.
211 results · Feed
-
Critical 9.8
lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object des…
-
Medium 5.7
Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files
An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to access private repository files through a public repository. To exploit this, an actor would need to already be authorized on the GitHub Enter…
-
High 7.5
Denial of Service (DoS)
The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed.
-
High 7.8CVE-2022-42827 Exploited
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS …
KEV Oct 25, 2022 -
Medium 6.4
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. …
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
High 7.0
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. …
-
Medium 6.1
The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Saf…
-
High 7.8
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventur…
-
Unscored —
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, ma…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
High 7.5
Apache Tomcat request smuggling via malformed content-length
If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing a…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access…
-
Unscored —
Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a …
-
Unscored —
Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenb…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an err…
-
High 7.8
A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS…
-
High 7.0
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be abl…
-
Medium 5.5
This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to …
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVE…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Medium 5.5
Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple…
-
Medium 5.5
A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS…
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16.1 and iPadOS 16, …
-
Unscored —
Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple…
-
Medium 5.5
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventu…
-
High 7.0
A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, m…
-
Medium 5.5
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, ma…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
High 8.8
A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS V…
-
High 8.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13,…
-
Medium 5.5
This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watch…
-
High 7.1
x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a g…
-
Unscored —
Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might …
-
Medium 5.5
An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPad…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, …
-
Medium 6.7
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13.…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS…