‼ CVE-2022-26390 ‼
📖 Read
via "National Vulnerability Database".
The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36793 ‼
📖 Read
via "National Vulnerability Database".
Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities in WP Shop plugin <= 3.9.6 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36869 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36423 ‼
📖 Read
via "National Vulnerability Database".
OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36864 ‼
📖 Read
via "National Vulnerability Database".
Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and execute privileged behavior.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36852 ‼
📖 Read
via "National Vulnerability Database".
Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38286 ‼
📖 Read
via "National Vulnerability Database".
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36863 ‼
📖 Read
via "National Vulnerability Database".
A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36847 ‼
📖 Read
via "National Vulnerability Database".
Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38457 ‼
📖 Read
via "National Vulnerability Database".
A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40191 ‼
📖 Read
via "National Vulnerability Database".
Authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Ali Khallad's Contact Form By Mega Forms plugin <= 1.2.4 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38058 ‼
📖 Read
via "National Vulnerability Database".
Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36842 ‼
📖 Read
via "National Vulnerability Database".
A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36855 ‼
📖 Read
via "National Vulnerability Database".
A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26393 ‼
📖 Read
via "National Vulnerability Database".
The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service (DoS) on the WBM.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38280 ‼
📖 Read
via "National Vulnerability Database".
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36843 ‼
📖 Read
via "National Vulnerability Database".
A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-37299 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38700 ‼
📖 Read
via "National Vulnerability Database".
OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38281 ‼
📖 Read
via "National Vulnerability Database".
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39845 ‼
📖 Read
via "National Vulnerability Database".
Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction.📖 Read
via "National Vulnerability Database".