Archive
8 November 2022
Vulnerabilities first published on this day (UTC), newest first.
120 results · Feed
-
Medium 6.4
In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege w…
-
Medium 6.4
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 6.7
In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.8
In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to lo…
-
High 7.8
In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalatio…
-
Medium 6.7
In aee, there is a possible use after free due to a missing bounds check. This could lead to local escalation of privil…
-
Medium 6.7
In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege …
-
Medium 6.7
In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privi…
-
Medium 6.7
In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privi…
-
Medium 6.4
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 6.4
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 6.4
In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Medium 5.5
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
High 7.2
Electron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirect
The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 21.0.0-beta.1, 20.0.1, 19.0.11, and 18.3.7, Electron is vulnerable to Exposure of Sensitive Information. When following a redirect,…
-
Critical 9.8
Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting bo…
KEV Jul 11, 2023 -
Medium 5.5
An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could sup…
-
Medium 6.5
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenti…
-
Medium 5.3
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c …
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c w…
-
Medium 5.5CVE-2022-44318 Public exploit
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c w…
-
Critical 9.8
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix …
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when calle…
-
High 8.1CVE-2022-44311 Public exploit
html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when…
-
High 7.5
Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availabil…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c wh…
-
Medium 5.5CVE-2022-44312 Public exploit
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in express…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c…
-
Medium 6.7
In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalatio…
-
Medium 5.5
SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attac…
-
Medium 4.8
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
High 7.8
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <…
-
Critical 9.9
In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated att…
-
High 8.7
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with h…
-
High 7.0
Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D…