Archive
9 November 2022
Vulnerabilities first published on this day (UTC), newest first.
179 results · Feed
-
High 7.5
An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing …
-
High 7.5
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x be…
-
Critical 9.8
Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf…
-
High 7.5
The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause th…
-
Medium 5.3
The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause la…
-
Medium 4.3
There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of th…
-
Critical 9.8
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerabi…
-
High 7.5
The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services…
-
Critical 9.8
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerabi…
-
Critical 9.8
The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect con…
-
High 7.5
The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may …
-
Medium 5.9
There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect da…
-
High 7.5
The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability m…
-
High 7.5
The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may caus…
-
High 7.5
The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Suc…
-
High 7.5
The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system fi…
-
Medium 6.6
Lin CMS vulnerable to Improper Authentication
An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.
-
High 7.5
The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vul…
-
Medium 5.3
The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke …
-
Critical 9.8
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of th…
-
High 7.5
The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the displa…
-
High 7.8
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
-
High 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
-
High 7.8CVE-2022-41073 Exploited · Ransomware
Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
KEV Nov 8, 2022 -
High 8.1
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
-
Medium 5.9
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
-
High 7.8CVE-2022-41125 Exploited
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
KEV Nov 8, 2022 -
High 7.8
Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability
-
High 8.8
Windows Scripting Languages Remote Code Execution Vulnerability
Windows Scripting Languages Remote Code Execution Vulnerability
KEV Nov 8, 2022 -
High 7.8
Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
-
High 7.8
Windows HTTP.sys Elevation of Privilege Vulnerability
Windows HTTP.sys Elevation of Privilege Vulnerability
-
High 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability
Windows Overlay Filter Elevation of Privilege Vulnerability
-
High 7.8
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
-
High 7.8
Windows Digital Media Receiver Elevation of Privilege Vulnerability
Windows Digital Media Receiver Elevation of Privilege Vulnerability
-
High 7.5
Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
-
Medium 5.4CVE-2022-41049 Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
KEV Nov 14, 2022 -
High 7.8
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
-
Medium 5.5
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
-
High 7.8
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
-
High 7.5
Windows Kerberos Denial of Service Vulnerability
Windows Kerberos Denial of Service Vulnerability