Samba security update-CVE-2021-44142
NAME Samba - Samba Platforms Affected:SambaRisk Level:lowCVE Type:Out-of-bounds write DESCRIPTION CVE-2021-44142 is an out-of-bounds write vulnerability impacting Samba versions 4.13.16...
CVE
Sourcegraph code execution | CVE-2022-23642
NAME Sourcegraph code execution Platforms Affected:Sourcegraph Sourcegraph 3.36.3Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Sourcegraph could allow a remote authenticated attacker to execute...
Cobbler security bypass | CVE-2021-45083
NAME Cobbler security bypass Platforms Affected:Cobbler Cobbler 3.3.0Risk Level:8.8Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION Cobbler could allow a local authenticated attacker to bypass...
MasterStudy LMS plugin for WordPress security bypass | CVE-2022-0441
NAME MasterStudy LMS plugin for WordPress security bypass Platforms Affected:WordPress MasterStudy LMS plugin for WordPress 2.7.5Risk Level:9.8Exploitability:Proof of ConceptConsequences:Bypass Security...
Samsung Galaxy S21 open redirect |
NAME Samsung Galaxy S21 open redirect Platforms Affected:Samsung Galaxy S21Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Samsung Galaxy S21 could allow a remote...
Datarobot code execution | CVE-2021-45414
NAME Datarobot code execution Platforms Affected:Datarobot DatarobotRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Datarobot could allow a remote attacker to execute arbitrary code...
snapcore snapd security bypass | CVE-2021-4120
NAME snapcore snapd security bypass Platforms Affected:snapcore snapd 2.54.2Risk Level:8.2Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION snapcore snapd could allow a local authenticated attacker...
libexpat integer overflow | CVE-2022-25315
NAME libexpat integer overflow Platforms Affected:libexpat libexpat 2.2.0 libexpat libexpat 2.2.6 libexpat libexpat 2.2.5 libexpat libexpat 2.2.4 libexpat libexpat 2.2.3...
SAS Web Report Studio cross-site scripting | CVE-2022-25256
NAME SAS Web Report Studio cross-site scripting Platforms Affected:SAS Web Report Studio 4.4Risk Level:7.2Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION SAS Web Report Studio...
TP-Link TL-WA850RE Wi-Fi Range Extender privilege escalation | CVE-2022-22922
NAME TP-Link TL-WA850RE Wi-Fi Range Extender privilege escalation Platforms Affected:TP-Link TL-WA850RE Wi-Fi Range ExtenderRisk Level:9.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION TP-Link TL-WA850RE Wi-Fi...
Vicidial AST_IVRstats.php AST_LISTS_pass_report.php AST_usergroup_login_report.php admin_lists_custom.php |
NAME Vicidial AST_IVRstats.php AST_LISTS_pass_report.php AST_usergroup_login_report.php admin_lists_custom.php Platforms Affected:Vicidial Vicidial 2.14-783aRisk Level:7.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION Vicidial is vulnerable to SQL injection. A...
Cosmetics and Beauty Product Online Store search SQL injection |
NAME Cosmetics and Beauty Product Online Store search SQL injection Platforms Affected:Sourcecodester Cosmetics and Beauty Product Online Store 1.0Risk Level:9.1Exploitability:HighConsequences:Data...
Vim buffer overflow | CVE-2022-0629
NAME Vim buffer overflow Platforms Affected:Vim Vim 6.0 Vim Vim 6.3 Vim Vim 6.4 Vim Vim 7.1.298 Vim Vim 7.2b...
TIBCO BusinessConnect Container Edition information disclosure | CVE-2021-43049
NAME TIBCO BusinessConnect Container Edition information disclosure Platforms Affected:TIBCO BusinessConnect Container Edition 1.1.0Risk Level:9.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION TIBCO BusinessConnect Container Edition...
Zyxel devices ping certificate upload command execution |
NAME Zyxel devices ping certificate upload command execution Platforms Affected:Zyxel VMG3312 B10B Zyxel VMG1312-B10D Zyxel AMG1302-T11C Zyxel VMG3925-B10C Zyxel VMG8924-B10D...
Prism.js Prism cross-site scripting | CVE-2022-23647
NAME Prism.js Prism cross-site scripting Platforms Affected:Prism.js Prism 1.14.0 Prism.js Prism 1.26.0Risk Level:7.5Exploitability:FunctionalConsequences:Cross-Site Scripting DESCRIPTION Prism.js Prism is vulnerable to...
Hancom Office buffer overflow | CVE-2021-21958
NAME Hancom Office buffer overflow Platforms Affected:Hancom Hancom Office 2020 11.0.0.2353Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Hancom Office is vulnerable...
Zepl Notebook security bypass | CVE-2021-42952
NAME Zepl Notebook security bypass Platforms Affected:Zepl NotebookRisk Level:8.8Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION Zepl Notebook could allow a remote authenticated attacker to...
Zyxel devices /cgi-bin/DAL?oid=login_privilege /cgi-bin/DAL?oid=mgmt_srv security bypass |
NAME Zyxel devices /cgi-bin/DAL?oid=login_privilege /cgi-bin/DAL?oid=mgmt_srv security bypass Platforms Affected:Zyxel VMG3312 B10B Zyxel VMG1312-B10D Zyxel WSQ20 Zyxel WSQ50 Zyxel AMG1302-T11C Zyxel...
Linux Kernel privilege escalation |
NAME Linux Kernel privilege escalation Platforms Affected:Linux Kernel 5.14 Linux Kernel 5.15 Linux Kernel 5.16Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION Linux Kernel...
VMware ESXi, Workstation and Fusion code execution | CVE-2021-22041
NAME VMware ESXi, Workstation and Fusion code execution Platforms Affected:VMware ESXi 6.5 VMware ESXi 6.7 VMware ESXi 7.0 VMware Cloud...
TIBCO BusinessConnect Container Edition information disclosure | CVE-2021-43050
NAME TIBCO BusinessConnect Container Edition information disclosure Platforms Affected:TIBCO BusinessConnect Container Edition 1.1.0Risk Level:9.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION TIBCO BusinessConnect Container Edition...
Zyxel devices libclinkc.so Export_Log zhttpd buffer overflow |
NAME Zyxel devices libclinkc.so Export_Log zhttpd buffer overflow Platforms Affected:Zyxel VMG3312 B10B Zyxel VMG1312-B10D Zyxel AMG1302-T11C Zyxel VMG3925-B10C Zyxel VMG8924-B10D...
JQueryForm.com file upload | CVE-2022-24984
NAME JQueryForm.com file upload Platforms Affected:JQueryForm.com JQueryForm.com 3.2.26Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION JQueryForm.com could allow a remote authenticated attacker to upload...
