8 November 2022

72 results · Clear filters · Feed

• Medium 5.5
  CVE-2022-44313

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in…

  Nov 8, 2022
• Medium 5.5
  CVE-2022-44314

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c …

  Nov 8, 2022
• Medium 5.5
  CVE-2022-44315

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c w…

  Nov 8, 2022
• Medium 5.5
  CVE-2022-44318 Public exploit

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c w…

  Nov 8, 2022
• Medium 5.5
  CVE-2022-44321

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when calle…

  Nov 8, 2022
• Medium 5.5
  CVE-2022-44316

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when…

  Nov 8, 2022
• Medium 5.5
  CVE-2022-44319

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.…

  Nov 8, 2022
• Medium 5.5
  CVE-2022-44317

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c wh…

  Nov 8, 2022
• Medium 5.5
  CVE-2022-44312 Public exploit

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in express…

  Nov 8, 2022
• Medium 5.5
  CVE-2022-44320

  PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c…

  Nov 8, 2022
• Medium 6.7
  CVE-2022-21778

  In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalatio…

  MediaTek MT6771, MT6779, MT6785, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6891, MT6893, MT8168, MT8175, MT8183, MT8365, MT8385, MT8788
  Nov 8, 2022
• Medium 5.5
  CVE-2022-41205

  SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attac…

  SAP SAP GUI for Windows Windows
  Nov 8, 2022
• Medium 4.8
  CVE-2022-41433

  EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the…

  Nov 8, 2022
• Medium 4.9
  CVE-2022-41212

  Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with h…

  SAP SAP NetWeaver Application Server ABAP and ABAP Platform
  Nov 8, 2022
• Medium 6.5
  CVE-2022-41258

  Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to i…

  SAP SAP Financial Consolidation
  Nov 8, 2022
• Medium 4.8
  CVE-2022-41432

  EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the…

  Nov 8, 2022
• Medium 6.5
  CVE-2022-41259

  SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anyw…

  SAP SAP SQL Anywhere
  Nov 8, 2022
• Medium 6.1
  CVE-2022-41260

  SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unaut…

  SAP SAP Financial Consolidation
  Nov 8, 2022
• Medium 5.4
  CVE-2022-41208

  Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with…

  SAP SAP Financial Consolidation
  Nov 8, 2022
• Medium 6.1
  CVE-2022-41434

  EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the…

  Nov 8, 2022
• Medium 4.7
  CVE-2022-41215

  SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site du…

  SAP SAP NetWeaver ABAP Server and ABAP Platform
  Nov 8, 2022
• Medium 6.1
  CVE-2022-41207

  SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting…

  SAP SAP Biller Direct
  Nov 8, 2022
• Medium 5.4
  CVE-2022-43144 Public exploit

  A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web …

  Nov 8, 2022
• Medium 5.5
  CVE-2022-20453

  In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error.…

  Android
  Nov 8, 2022
• Medium 6.7
  CVE-2022-20454

  In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local …

  Android
  Nov 8, 2022
• Medium 5.5
  CVE-2022-20414

  In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exc…

  Android
  Nov 8, 2022
• Medium 6.5
  CVE-2022-20447

  In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remot…

  Android
  Nov 8, 2022
• Medium 5.5
  CVE-2022-20457

  In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to im…

  Android
  Nov 8, 2022
• Medium 5.5
  CVE-2022-20448

  In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a …

  android-framework-23 Android Ubuntu
  Nov 8, 2022
• Medium 5.5
  CVE-2022-20426

  In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account du…

  Android
  Nov 8, 2022
• Medium 4.6
  CVE-2022-20465

  In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen b…

  Android
  Nov 8, 2022
• Medium 5.4
  CVE-2021-40303 Public exploit

  perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.

  Nov 8, 2022