🚨 CVE-2022-21213
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively is not checked, leading to exploiting this vulnerability. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7792](https://security.snyk.io/vuln/SNYK-JS-MOUT-1014544).
🎖@cveNotify
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively is not checked, leading to exploiting this vulnerability. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7792](https://security.snyk.io/vuln/SNYK-JS-MOUT-1014544).
🎖@cveNotify
Snyk Vulnerability Database
Prototype Pollution in org.webjars.npm:mout | CVE-2022-21213 | Snyk
Fix high severity Prototype Pollution vulnerability affecting org.webjars.npm:mout package, versions [0,]
🚨 CVE-2022-1595
The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request
🎖@cveNotify
The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request
🎖@cveNotify
WPScan
HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure
See details on HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure CVE 2022-1595. View the latest Plugin Vulnerabilities on WPScan.
🚨 CVE-2022-1549
The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor does it escape the values when outputting them back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability.
🎖@cveNotify
The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor does it escape the values when outputting them back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability.
🎖@cveNotify
🚨 CVE-2022-0745
The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body
🎖@cveNotify
The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body
🎖@cveNotify
🚨 CVE-2022-31400
A cross-site scripting (XSS) vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field.
🎖@cveNotify
A cross-site scripting (XSS) vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field.
🎖@cveNotify
YouTube
Helpdeskz - Stored XSS - Email Field
🚨 CVE-2022-31756
The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.
🎖@cveNotify
The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.
🎖@cveNotify
🚨 CVE-2022-31755
The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.
🎖@cveNotify
The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.
🎖@cveNotify
🚨 CVE-2022-31751
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.
🎖@cveNotify
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.
🎖@cveNotify
🚨 CVE-2021-46814
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
🎖@cveNotify
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
🎖@cveNotify
🚨 CVE-2022-31762
The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.
🎖@cveNotify
The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.
🎖@cveNotify
👍1
🚨 CVE-2022-21166
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
🎖@cveNotify
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
🎖@cveNotify
Intel
INTEL-SA-00615
🚨 CVE-2022-21125
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
🎖@cveNotify
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
🎖@cveNotify
Intel
INTEL-SA-00615
🚨 CVE-2022-21123
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
🎖@cveNotify
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
🎖@cveNotify
Intel
INTEL-SA-00615
🚨 CVE-2014-125017
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
Vuldb
CVE-2014-125017: FFmpeg rpza_decode_stream memory corruption (XFDB-91150 / SA56847)
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability was named CVE-2014-125017. It is recommended to apply a patch to fix this issue.
🚨 CVE-2014-125016
A vulnerability was found in FFmpeg 2.0. It has been rated as problematic. This issue affects the function ff_init_buffer_info of the file utils.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability was found in FFmpeg 2.0. It has been rated as problematic. This issue affects the function ff_init_buffer_info of the file utils.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
Vuldb
CVE-2014-125016: FFmpeg utils.c ff_init_buffer_info memory corruption (XFDB-91209 / SA56987)
A vulnerability was found in FFmpeg 2.0. It has been rated as problematic. The identification of this vulnerability is CVE-2014-125016. It is recommended to apply a patch to fix this issue.
🚨 CVE-2014-125015
A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
Vuldb
CVE-2014-125015: FFmpeg read_var_block_data memory corruption (XFDB-91210 / SA56987)
A vulnerability classified as critical has been found in FFmpeg 2.0. This vulnerability is traded as CVE-2014-125015. It is recommended to apply a patch to fix this issue.
🚨 CVE-2014-125014
A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
🚨 CVE-2014-125013
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrle_decode_frame of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrle_decode_frame of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
🚨 CVE-2014-125012
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
Vuldb
CVE-2014-125012: FFmpeg dxtroy.c integer coercion (XFDB-91255 / BID-65671)
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. This vulnerability is traded as CVE-2014-125012. It is recommended to apply a patch to fix this issue.
🚨 CVE-2014-125011
A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
🚨 CVE-2014-125010
A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decode_slice_header of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decode_slice_header of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
Vuldb
CVE-2014-125010: FFmpeg h64.c decode_slice_header memory corruption (XFDB-91257 / BID-65671)
A vulnerability was found in FFmpeg 2.0. It has been rated as critical. This vulnerability is handled as CVE-2014-125010. It is recommended to apply a patch to fix this issue.