Archive
6 December 2022
Vulnerabilities first published on this day (UTC), newest first.
95 results · Feed
-
Medium 5.5
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
High 7.8
In power management service, there is a missing permission check. This could lead to set up power management service wi…
-
High 7.8
In power management service, there is a missing permission check. This could lead to set up power management service wi…
-
High 7.8
In power management service, there is a missing permission check. This could lead to set up power management service wi…
-
Medium 5.5
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local …
-
High 7.8
In power management service, there is a missing permission check. This could lead to set up power management service wi…
-
High 7.8
In power management service, there is a missing permission check. This could lead to set up power management service wi…
-
High 7.8
In power management service, there is a missing permission check. This could lead to set up power management service wi…
-
High 7.8
In power management service, there is a missing permission check. This could lead to set up power management service wi…
-
Medium 6.3
FastCMS Template edit injection
A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the file /template/edit of the component Template Handler. The manipulation leads to injection. The attack may be initiated remotely. The exploi…
-
Medium 6.0
Improper Privilege Management in ikus060/rdiffweb
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
-
High 7.5
Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed
Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made with XMLHttpRequest are the ones which have no event listeners registered on the object returned by the XMLHttpRequest upload property and…
-
Medium 6.5
TP-Link TL-WR740N ARP resource consumption
A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manipulation leads to resource consumption. The attack needs to be done within the local network. The exploit has …
-
Critical 9.8
RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 …
-
High 8.8
RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 …
-
High 8.8
AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.
-
Medium 4.9
An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remot…
-
Medium 4.7
A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through…
-
High 7.5
Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permi…
-
Critical 9.1CVE-2022-44900 Public exploit
py7zr directory traversal vulnerability
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.
-
High 8.8
Thinkphp has a code logic error
Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.
-
Medium 4.8
Heap out of bounds read in `QuantizeAndDequantizeV2` in Tensorflow
TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memor…
-
High 7.8
An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a use…
-
High 7.1
Out of bounds write in grappler in Tensorflow
TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memor…
-
Medium 5.5
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
-
Medium 5.5
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
-
Medium 5.5
In npu driver, there is a memory corruption due to a use after free. This could lead to local denial of service in kern…
-
Medium 5.5
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
-
High 7.8
In windows manager service, there is a missing permission check. This could lead to set up windows manager service with…
-
High 7.8
In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no addi…
-
Medium 5.5
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
-
Medium 6.6
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
-
Medium 4.7
In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
-
Medium 6.6
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
-
Low 3.3
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
-
High 7.7
In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of…
-
High 7.8
In power management service, there is a missing permission check. This could lead to set up power management service wi…
-
Medium 5.5
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
-
Low 3.3
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
-
Medium 5.5
In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of ser…