Daily Vulnerability Trends: Sun Aug 21 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2021-1789A type confusion issue was addressed with improved state handling. This issue...
CVE
IBM MQ external entity injection | CVE-2022-22489
NAME IBM MQ external entity injection Platforms Affected:IBM MQ 8.0 IBM MQ 9.0.LTS IBM MQ 9.1.LTS IBM MQ 9.1.CD IBM...
Daily Vulnerability Trends: Sat Aug 20 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-27255In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function...
Vim buffer overflow | CVE-2022-2849
NAME Vim buffer overflow Platforms Affected:Vim Vim 9.0.0218Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Vim is vulnerable to a heap-based buffer...
ipTIME NAS family cross-site request forgery | CVE-2022-23765
NAME ipTIME NAS family cross-site request forgery Platforms Affected:ipTIME NAS 1.4Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION ipTIME NAS family is vulnerable to...
TERUTEN WebCube code execution | CVE-2022-23764
NAME TERUTEN WebCube code execution Platforms Affected:TERUTEN WebCube 1.0.5.5Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION TERUTEN WebCube could allow a remote attacker to...
Weaveworks GitOps Tools Extension for VSCode code execution | CVE-2022-35975
NAME Weaveworks GitOps Tools Extension for VSCode code execution Platforms Affected:Weaveworks GitOps Tools Extension for VSCode 0.7.0 Weaveworks GitOps Tools...
Zoom Client for Meetings for macOS privilege escalation | CVE-2022-28757
NAME Zoom Client for Meetings for macOS privilege escalation Platforms Affected:Zoom Client for Meetings for macOS 5.7.3 Zoom Client for...
Vim code execution | CVE-2022-2845
NAME Vim code execution Platforms Affected:Vim Vim 9.0.0216Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Vim could allow a remote attacker to...
WWBN AVideo cross-site request forgery | CVE-2022-29468
NAME WWBN AVideo cross-site request forgery Platforms Affected:WWBN AVideo 11.6 WWBN AVideo dev master commit 3f7c0364Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION WWBN...
WWBN AVideo command execution | CVE-2022-30534
NAME WWBN AVideo command execution Platforms Affected:WWBN AVideo 11.6 WWBN AVideo dev master commit 3f7c0364Risk Level:9.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION WWBN AVideo...
Softing Secure Integration Server default account | CVE-2022-2336
NAME Softing Secure Integration Server default account Platforms Affected:Softing Secure Integration Server 1.22Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Softing Secure Integration Server...
TIBCO Statistica cross-site scripting | CVE-2022-30576
NAME TIBCO Statistica cross-site scripting Platforms Affected:TIBCO Statistica 14.0.0 TIBCO Statistica 14.0.0 Estore Edition TIBCO Statistica 14.0.0 Trial Edition TIBCO...
WWBN AVideo command execution | CVE-2022-32572
NAME WWBN AVideo command execution Platforms Affected:WWBN AVideo 11.6 WWBN AVideo dev master commit 3f7c0364Risk Level:9.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION WWBN AVideo...
Google Chrome Downloads buffer overflow | CVE-2022-2853
NAME Google Chrome Downloads buffer overflow Platforms Affected:Google Chrome 104.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome is vulnerable to a heap-based...
Sequi PortBloque S privilege escalation | CVE-2022-2661
NAME Sequi PortBloque S privilege escalation Platforms Affected:Sequi PortBloque SRisk Level:9.9Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION Sequi PortBloque S could allow a remote...
Google Chrome ANGLE code execution | CVE-2022-2855
NAME Google Chrome ANGLE code execution Platforms Affected:Google Chrome 104.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...
WWBN AVideo add.json.php SQL injection | CVE-2022-33148
NAME WWBN AVideo add.json.php SQL injection Platforms Affected:WWBN AVideo 11.6 WWBN AVideo dev master commit 3f7c0364Risk Level:8.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION WWBN...
Google Chrome SwiftShader code execution | CVE-2022-2854
NAME Google Chrome SwiftShader code execution Platforms Affected:Google Chrome 104.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...
Google Chrome FedCM code execution | CVE-2022-2852
NAME Google Chrome FedCM code execution Platforms Affected:Google Chrome 104.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...
Google Chrome Sign-In Flow code execution | CVE-2022-2858
NAME Google Chrome Sign-In Flow code execution Platforms Affected:Google Chrome 104.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote...
PortBloque S security bypass | CVE-2022-2662
NAME PortBloque S security bypass Platforms Affected:Sequi PortBloque SRisk Level:9.6Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION PortBloque S could allow a remote attacker to...
WWBN AVideo cross-site scripting | CVE-2022-26842
NAME WWBN AVideo cross-site scripting Platforms Affected:WWBN AVideo 11.6 WWBN AVideo dev master commit 3f7c0364Risk Level:9.6Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION WWBN AVideo...
WWBN AVideo privilege escalation | CVE-2022-30605
NAME WWBN AVideo privilege escalation Platforms Affected:WWBN AVideo 11.6 WWBN AVideo dev master commit 3f7c0364Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION WWBN AVideo...
