Archive
9 November 2022
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
Critical 9.8
An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0…
-
Critical 9.8
WAGO I/O-Check Service prone to Out-of-bounds Write
In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory.
-
Critical 9.1
WAGO I/O-Check Service prone to Memory Overflow
In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.
-
Critical 9.8
VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor wit…
-
Critical 9.8
VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with netw…
-
Critical 9.8
VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with netwo…
-
Critical 9.8
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a v…
-
Critical 9.6
Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had …
-
Critical 9.8
In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mi…
-
Critical 9.8
Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf…
-
Critical 9.8
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerabi…
-
Critical 9.8
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerabi…
-
Critical 9.8
The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect con…
-
Critical 9.8
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of th…
-
Critical 9.8
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…
-
Critical 9.8
The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerabi…