Archive
5 December 2022
Vulnerabilities first published on this day (UTC), newest first.
107 results · Feed
-
Medium 6.7
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat…
-
Medium 6.7
In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of priv…
-
Medium 6.7
In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of priv…
-
Medium 6.4
In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privile…
-
Critical 9.8CVE-2022-32224 Public exploit
Active Record RCE bug with Serialized Columns
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the abilit…
-
Medium 6.7
In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead …
-
Medium 6.7
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat…
-
Medium 6.7
In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati…
-
Medium 6.7
In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wi…
-
Medium 6.7
In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation…
-
Medium 6.7
In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation…
-
Critical 9.8
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data …
-
Medium 6.7
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat…
-
Medium 6.7
In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead …
-
Medium 6.7
In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escal…
-
Medium 6.7
In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati…
-
Medium 6.7
In ccci, there is a possible out of bounds write due to improper input validation. This could lead to local escalation …
-
Critical 9.8
A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execu…
-
High 8.8
Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulne…
-
Medium 5.1
Telepad allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data …
-
High 7.2
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUpl…
-
Critical 9.8CVE-2022-45477 Public exploit
Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any pr…
-
Medium 6.4
Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerab…
-
Critical 9.8
The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute a…
-
Critical 9.8
PC Keyboard allows remote unauthenticated users to send instructions to the server to execute arbitrary code without an…
-
High 8.8
Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in the component /ruk…
-
High 8.8CVE-2022-45771 Public exploit
An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary co…
-
High 7.8
GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_…
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in ClicShopping_V3 v3.402 allows attackers to execute arbitrary web scripts …
-
High 7.5
SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter.
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attacke…
-
High 7.5
Denial of Service Vulnerability in Rack Multipart Parsing
A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.
-
Critical 10.0
Possible shell escape sequence injection vulnerability in Rack
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
-
Critical 9.8
Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attack…
-
High 7.5
Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, al…
-
Critical 9.8
Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewri…
-
Medium 6.5
ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an …
-
High 7.5
nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit
Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server t…