🚨 CVE-2022-2183
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

🚨 CVE-2022-2182
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

🚨 CVE-2022-34299
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.

🎖@cveNotify

🚨 CVE-2022-34328
PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see request to index.php.

🎖@cveNotify

🚨 CVE-2022-34300
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.

🎖@cveNotify

🚨 CVE-2021-36773
uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption and a loss of all blocking functionality).

🎖@cveNotify

🚨 CVE-2022-34835
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

🎖@cveNotify

🚨 CVE-2022-28327
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

🎖@cveNotify

🚨 CVE-2022-24675
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

🎖@cveNotify

🚨 CVE-2022-2124
Buffer Over-read in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

🚨 CVE-2022-2126
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

🚨 CVE-2022-2125
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

🚨 CVE-2022-2129
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

🚨 CVE-2022-1720
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

🎖@cveNotify

🚨 CVE-2022-2175
Buffer Over-read in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

🚨 CVE-2022-2183
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

🚨 CVE-2017-20125
A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

🎖@cveNotify

🚨 CVE-2017-20124
A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the file /front/roomtype-details.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

🎖@cveNotify

🚨 CVE-2017-20123
A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an unknown part of the component DLL Handler. The manipulation leads to untrusted search path. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.8 is able to address this issue. It is recommended to upgrade the affected component.

🎖@cveNotify

🚨 CVE-2021-40643
EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page (by default/usr/sbin/sendmail) it is possible to execute any command, which will be executed when we make a test of the configuration ("send test mail").

🎖@cveNotify

🚨 CVE-2022-34184
Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

🎖@cveNotify