Archive
13 December 2022
Vulnerabilities first published on this day (UTC), newest first.
74 results · Clear filters · Feed
-
Medium 6.5
Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
-
Medium 6.1
Resque Scheduler Reflected XSS In Delayed Jobs View
Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting (XSS). A remote attacker could inject javascript code to the "{schedule_job}" or "args" parameter in /resque/delayed/jobs/{schedule_job}?args={args_id} to execute javascript at client side.
-
Medium 4.3
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
-
Medium 4.6
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth sp…
-
Medium 6.8
Windows Hyper-V Denial of Service Vulnerability
Windows Hyper-V Denial of Service Vulnerability
-
Medium 5.5
Azure Network Watcher Agent Security Feature Bypass Vulnerability
Azure Network Watcher Agent Security Feature Bypass Vulnerability
-
Medium 6.5
Windows Kernel Denial of Service Vulnerability
Windows Kernel Denial of Service Vulnerability
-
Medium 5.4
Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
KEV Dec 13, 2022 -
Medium 5.5
wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component …
-
Medium 6.7
Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, S…
-
Medium 6.7
Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Sna…
-
Medium 5.5
Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdrago…
-
Medium 6.7
Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdrago…
-
Medium 5.5
Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
-
Medium 6.5
Netty vulnerable to HTTP Response splitting from assigning header value iterator
Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling `DefaultHttpHeadesr.set` with an _iterator_ of values, header value validation was not performed, allowing ma…
-
Medium 6.6
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
-
Medium 5.4
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting (XSS) via lform/urlfilter.
-
Medium 5.4
csaf-poc/csaf_distribution Cross-site Scripting vulnerability
The csaf_provider package before 0.8.2 allows XSS via a crafted CSAF document uploaded as text/html. The endpoint upload allows valid CSAF advisories (JSON format) to be uploaded with Content-Type text/html and filenames ending in .html. When subsequently acc…
-
Medium 4.6
In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifica…
-
Medium 5.5
In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lea…
-
Medium 4.4
In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Medium 5.5
In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free.…
-
Medium 5.5
In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. …
-
Medium 5.5
In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead…
-
Medium 5.5
In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's pass…
-
Medium 5.5
In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due…
-
Medium 4.4
In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a p…
-
Medium 5.5
In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and requi…
-
Medium 6.5
In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could…
-
Medium 5.5
In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could l…
-
Medium 4.9
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 5.5
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 4.9
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 5.3
pacparser pacparser.c pacparser_find_proxy buffer overflow
A vulnerability classified as problematic was found in pacparser up to 1.3.x. Affected by this vulnerability is the function pacparser_find_proxy of the file src/pacparser.c. The manipulation of the argument url leads to buffer overflow. Attacking locally is …