‼ CVE-2022-39891 ‼
📖 Read
via "National Vulnerability Database".
Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39886 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44546 ‼
📖 Read
via "National Vulnerability Database".
The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerability may cause a system restart.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39887 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configure EDM setting.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44555 ‼
📖 Read
via "National Vulnerability Database".
The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44557 ‼
📖 Read
via "National Vulnerability Database".
The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41091 ‼
📖 Read
via "National Vulnerability Database".
Windows Mark of the Web Security Feature Bypass Vulnerability. This CVE ID is unique from CVE-2022-41049.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43058 ‼
📖 Read
via "National Vulnerability Database".
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41090 ‼
📖 Read
via "National Vulnerability Database".
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-41116.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41061 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Word Remote Code Execution Vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44553 ‼
📖 Read
via "National Vulnerability Database".
The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44558 ‼
📖 Read
via "National Vulnerability Database".
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31686 ‼
📖 Read
via "National Vulnerability Database".
VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41103 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Word Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-41060.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41097 ‼
📖 Read
via "National Vulnerability Database".
Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-41125 ‼
📖 Read
via "National Vulnerability Database".
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44562 ‼
📖 Read
via "National Vulnerability Database".
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43310 ‼
📖 Read
via "National Vulnerability Database".
An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3280 ‼
📖 Read
via "National Vulnerability Database".
An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick users into visiting a trustworthy URL and being redirected to arbitrary content.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3818 ‼
📖 Read
via "National Vulnerability Database".
An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to cause performance issues and potentially a denial of service on the GitLab instance.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3483 ‼
📖 Read
via "National Vulnerability Database".
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, all versions starting from 15.5 before 15.5.2. A malicious maintainer could exfiltrate a Datadog integration's access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server.📖 Read
via "National Vulnerability Database".