Archive
1 November 2022
Vulnerabilities first published on this day (UTC), newest first.
211 results · Feed
-
Critical 9.8
A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation.…
-
Unscored —
Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. Whe…
-
Medium 5.9
This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciousl…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13…
-
Medium 6.7
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 16.1 and iPadOS 16, ma…
-
High 7.8
This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, w…
-
Critical 9.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 an…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVE…
-
Medium 6.4
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. …
-
Unscored —
Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations…
-
Medium 6.5
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, …
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Medium 6.5
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 16.0.3. Processing a…
-
Medium 4.3
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in ma…
-
High 8.8
A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input valid…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …
-
High 8.8CVE-2022-26717 Public exploit
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iO…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iP…
-
High 7.8
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4, iOS …
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, …
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execut…
-
High 7.3
Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version <2.2.0 allows an unprivileged …
-
High 7.2
Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType param…
-
High 7.2
An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to exec…
-
High 7.2
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…
-
Medium 4.8
Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the c…
-
Medium 4.8
A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Web-Based Student Clearance System v1.0 allows atta…
-
High 7.2
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /ad…
-
High 7.5
open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows…
-
High 7.2
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editord…
-
Medium 4.8
A cross-site scripting (XSS) vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to …
-
High 7.5
open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows atta…
-
High 7.2
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php_act…
-
High 7.2
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…
-
Medium 4.9
Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php.
-
High 7.2
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editord…