‼ CVE-2022-35101 ‼
📖 Read
via "National Vulnerability Database".
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-10710 ‼
📖 Read
via "National Vulnerability Database".
A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34256 ‼
📖 Read
via "National Vulnerability Database".
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does not require user interaction.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35478 ‼
📖 Read
via "National Vulnerability Database".
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35481 ‼
📖 Read
via "National Vulnerability Database".
OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35479 ‼
📖 Read
via "National Vulnerability Database".
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35475 ‼
📖 Read
via "National Vulnerability Database".
OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41a8.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-1755 ‼
📖 Read
via "National Vulnerability Database".
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35476 ‼
📖 Read
via "National Vulnerability Database".
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38233 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38235 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38237 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38236 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38238 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38230 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a floating point exception (FPE) via DCTStream::decodeImage() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38234 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38231 ‼
📖 Read
via "National Vulnerability Database".
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35434 ‼
📖 Read
via "National Vulnerability Database".
jpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg-quantsmooth/jpegqs+0x4f5d6c.📖 Read
via "National Vulnerability Database".
🕴 Microsoft Rolls Out Tamper Protection for Macs 🕴
📖 Read
via "Dark Reading".
The tamper protection feature detects attempts to modify files and processes for Microsoft Defender for Endpoints on macOS.📖 Read
via "Dark Reading".
Dark Reading
Microsoft Rolls Out Tamper Protection for Macs
The new feature detects attempts to modify files and processes for Microsoft Defender for Endpoints on macOS.
👍1
‼ CVE-2022-25799 ‼
📖 Read
via "National Vulnerability Database".
An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.5.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user's credentials.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42052 ‼
📖 Read
via "National Vulnerability Database".
IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter.📖 Read
via "National Vulnerability Database".