Archive
November 2022
Vulnerabilities first published in this month (UTC), newest first.
900 results · Clear filters · Feed
-
Medium 6.4
In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege w…
-
Medium 6.4
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 6.7
In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.8
In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to lo…
-
Medium 6.7
In aee, there is a possible use after free due to a missing bounds check. This could lead to local escalation of privil…
-
Medium 6.7
In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege …
-
Medium 6.7
In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privi…
-
Medium 6.7
In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privi…
-
Medium 6.4
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 6.4
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…
-
Medium 6.4
In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Medium 5.5
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Medium 5.5
An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could sup…
-
Medium 6.5
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenti…
-
Medium 5.3
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c …
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c w…
-
Medium 5.5CVE-2022-44318 Public exploit
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c w…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when calle…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c wh…
-
Medium 5.5CVE-2022-44312 Public exploit
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in express…
-
Medium 5.5
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c…
-
Medium 6.7
In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalatio…
-
Medium 5.5
SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attac…
-
Medium 4.8
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the…
-
Medium 4.9
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with h…
-
Medium 6.5
Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to i…
-
Medium 4.8
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the…
-
Medium 6.5
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anyw…
-
Medium 6.1
SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unaut…
-
Medium 5.4
Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with…
-
Medium 6.1
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the…
-
Medium 4.7
SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site du…
-
Medium 6.1
SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting…
-
Medium 5.4CVE-2022-43144 Public exploit
A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web …
-
Medium 5.5
In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error.…
-
Medium 6.7
In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local …