Archive
8 November 2022
Vulnerabilities first published on this day (UTC), newest first.
31 results · Clear filters · Feed
-
High 8.3
Remote desktop takeover via phishing
Remote desktop takeover via phishing
-
High 7.4
WordPress Activity Log plugin <= 2.8.3 - CSV Injection vulnerability
CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress.
-
High 7.8
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34…
-
High 7.5
fastify-websocket vulnerable to uncaught exception via crash on malformed packet
@fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a specific, malformed packet is sent. All versions of fastify-websocket are also impacted. That module is deprecated, so it will not be patched.…
-
High 7.0
sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently ch…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalatio…
-
High 7.2
Electron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirect
The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 21.0.0-beta.1, 20.0.1, 19.0.11, and 18.3.7, Electron is vulnerable to Exposure of Sensitive Information. When following a redirect,…
-
High 8.1CVE-2022-44311 Public exploit
html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo…
-
High 7.5
Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availabil…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
High 8.7
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with h…
-
High 7.0
Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
High 8.8
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing opera…
-
High 7.5
In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of…
-
High 7.5
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versi…
-
High 7.5CVE-2022-43343 Public exploit
N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c.
-
High 7.6
A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). …
-
High 7.8
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.…
-
High 7.8
In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check.…
-
High 7.5
In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validat…
-
High 7.8
In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in th…
-
High 7.8CVE-2022-20452 Public exploit
In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused…
-
High 7.8
In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission c…
-
High 7.8
In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a…
-
High 7.8
In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a mis…
-
High 7.8
In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. …