Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
2,349 results · page 43 of 47
Aug 16, 2022JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.CVE-2022-35003 · Other software · Bitbanksoftware · reported by MITREHigh 7.8
JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.
- Product
- Jpegdec
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 16, 2022JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl.CVE-2022-35002 · Other software · Bitbanksoftware · reported by MITREMedium 5.5
JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl.
- Product
- Jpegdec
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 16, 2022JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c.CVE-2022-35000 · Other software · Bitbanksoftware · reported by MITREMedium 5.5
JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c.
- Product
- Jpegdec
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 16, 2022JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.CVE-2022-34999 · Other software · Bitbanksoftware · reported by MITREMedium 5.5
JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.
- Product
- Jpegdec
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 16, 2022JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl.CVE-2022-34998 · Other software · Bitbanksoftware · reported by MITREHigh 7.8
JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl.
- Product
- Jpegdec
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 28, 2022SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCCVE-2022-36234 · Other software · Simplenetwork Project · reported by MITREHigh 7.5
SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets.
- Product
- Simplenetwork
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 28, 2022Possible cross-site scripting vulnerability in libxml after commit 960f0e2.CVE-2016-3709 · Other software · Siemens · reported by Red HatMedium 6.1
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Product
- SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmail.gnome.orglists.debian.org
Jul 18, 2022RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory.CVE-2022-34643 · Other software · Riscv · reported by MITREMedium 5.5
RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory.
- Product
- Spike Risc-v ISA Simulator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect mask which can cause a Denial of Service (CVE-2022-34642 · Other software · Riscv · reported by MITREMedium 5.5
The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect mask which can cause a Denial of Service (DoS).
- Product
- Spike Risc-v ISA Simulator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type whenCVE-2022-34641 · Other software · Boom-core · reported by MITREMedium 5.5
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation.
- Product
- Riscvc-boom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered to be incorrect.CVE-2022-34640 · Other software · Openhwgroup · reported by MITREMedium 5.5
The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered to be incorrect.
- Product
- Cva6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which can affect the function of the application.CVE-2022-34639 · Other software · Openhwgroup · reported by MITREMedium 5.5
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which can affect the function of the application.
- Product
- Cva6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal virtual address is loaded.CVE-2022-34637 · Other software · Openhwgroup · reported by MITREMedium 5.5
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal virtual address is loaded.
- Product
- Cva6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type whenCVE-2022-34636 · Other software · Openhwgroup · reported by MITREMedium 5.5
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation.
- Product
- Cva6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.fs field is set to Dirty.CVE-2022-34635 · Other software · Openhwgroup · reported by MITRECritical 9.8
The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.fs field is set to Dirty.
- Product
- Cva6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions rather create an exception.CVE-2022-34634 · Other software · Openhwgroup · reported by MITREMedium 5.5
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions rather create an exception.
- Product
- Cva6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions rather create an exception.CVE-2022-34633 · Other software · Openhwgroup · reported by MITREMedium 5.5
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions rather create an exception.
- Product
- Cva6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 18, 2022Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.scala.CVE-2022-34632 · Computers, phones & browsers · Linuxfoundation · reported by MITRECritical 9.1
Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.scala.
- Product
- Rocket Chip Generator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 13, 2022A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13debCVE-2022-32074 · Other software · Enhancesoft · reported by MITREMedium 5.4
A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.
- Product
- Osticket
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 29, 2022CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wrong.CVE-2022-33023 · Other software · Openhwgroup · reported by MITREHigh 7.5
CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wrong.
- Product
- Cva6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 29, 2022CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30.CVE-2022-33021 · Other software · Openhwgroup · reported by MITREHigh 7.5
CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30.
- Product
- Cva6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 8, 2022GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vulCVE-2021-40592 · Other software · Gpac · reported by MITREMedium 5.5
GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vulnerability in ISOBMFF reader filter, isoffin_read.c. Function isoffin_process() can result in DoS by infinite loop. To exploit, the victim must open a specially crafted mp4 file.
- Product
- Gpac
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, allows attackers to exeCVE-2021-34082 · Other software · Proctree Project · reported by MITRECritical 9.8
OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, allows attackers to execute arbitrary commands via the fix function.
- Product
- Proctree
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordadvisory.checkmarx.netgithub.com
May 12, 2022A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-serviCVE-2021-27500 · Other software · EIPStackGroup · reported by ics-cert@hq.dhs.govHigh 7.5
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
- Product
- OpENer EtherNet/IP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2022A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-serviCVE-2021-27498 · Other software · EIPStackGroup · reported by ics-cert@hq.dhs.govHigh 7.5
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
- Product
- OpENer EtherNet/IP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2022A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read CVE-2021-27482 · Other software · EIPStackGroup · reported by ics-cert@hq.dhs.govHigh 7.5
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read arbitrary data.
- Product
- OpENer EtherNet/IP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2022A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service cCVE-2021-27478 · Other software · EIPStackGroup · reported by ics-cert@hq.dhs.govHigh 8.2
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition.
- Product
- OpENer EtherNet/IP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2022Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sCVE-2022-29368 · Other software · Moddable · reported by MITREHigh 7.1
Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c.
- Product
- Moddable
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 5, 2022In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in CVE-2022-28471 · Other software · Rockcarry · reported by MITREMedium 6.5
In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfif_encode() in jfif.c. This is due to the incomplete patch for issue 38
- Product
- Ffjpeg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2022A flaw was found in htmldoc commit 31f7804.CVE-2022-28085 · Other software · Htmldoc Project · reported by MITREHigh 7.8
A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).
- Product
- Htmldoc
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 22, 2022FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.CVE-2022-27406 · Other software · Freetype · reported by MITREHigh 7.5
FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.
- Product
- Freetype
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgitlab.freedesktop.orglists.fedoraproject.org
Apr 22, 2022FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.CVE-2022-27405 · Other software · Freetype · reported by MITREHigh 7.5
FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.
- Product
- Freetype
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgitlab.freedesktop.orglists.fedoraproject.org
Apr 22, 2022FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.CVE-2022-27404 · Other software · Freetype · reported by MITRECritical 9.8
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.
- Product
- Freetype
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgitlab.freedesktop.orglists.fedoraproject.org
Apr 14, 2022A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e.CVE-2021-40426 · Other software · Sound Exchange · reported by talos-cna@cisco.comHigh 8.8
A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
- Product
- libsox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comlists.debian.org
Apr 14, 2022An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), andCVE-2021-40402 · Other software · Gerbv · reported by talos-cna@cisco.comHigh 7.5
An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
- Product
- Gerbv
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 14, 2022An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forkedCVE-2021-40400 · Other software · Gerbv · reported by talos-cna@cisco.comHigh 7.5
An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit d7f42a9a). A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
- Product
- Gerbv
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 5, 2022Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the newCVE-2021-41752 · Other software · Jerryscript · reported by MITRECritical 9.8
Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt() function.
- Product
- Jerryscript
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 5, 2022Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in Jerryscript before commit e1ceCVE-2021-41751 · Other software · Jerryscript · reported by MITRECritical 9.8
Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021.
- Product
- Jerryscript
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 2022A cross-site scripting (XSS) vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web scripts or HTML via a CVE-2022-26565 · Other software · Totaljs · reported by MITREMedium 4.8
A cross-site scripting (XSS) vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Name text field when creating a new page.
- Product
- Content Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbug.pocas.krgithub.com
Mar 28, 2022BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of information to an attacker with local user acCVE-2022-26296 · Other software · Boom-core · reported by MITREMedium 5.5
BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
- Product
- Risvc-boom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 26, 2022Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields.CVE-2022-26205 · Other software · Marky Project · reported by MITRECritical 9.8
Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields. This vulnerability allows attackers to execute arbitrary code via injection of a crafted payload.
- Product
- Marky
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2022The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.CVE-2021-34122 · Other software · Rockcarry · reported by MITREMedium 5.5
The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.
- Product
- Ffjpeg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 28, 2022An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500.CVE-2021-44962 · Other software · Slic3r · reported by MITREMedium 5.5
An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially crafted stl file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
- Product
- Libslic3r
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 28, 2022A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500.CVE-2021-44961 · Other software · Slic3r · reported by MITREMedium 5.5
A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exhaust available memory. An attacker can provide malicious files to trigger this vulnerability.
- Product
- Libslic3r
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 28, 2022Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt():AudioFile.h.CVE-2022-25023 · Other software · Audio File Project · reported by MITREHigh 8.8
Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt():AudioFile.h.
- Product
- Audio File
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2022A reflected cross-site scripting (XSS) in ScratchOAuth2 before commit 1603f04e44ef67dde6ccffe866d2dca16defb293 allows attackers to execute arbitrary web scriptsCVE-2021-46251 · Other software · Scratchoauth2 Project · reported by MITREMedium 6.1
A reflected cross-site scripting (XSS) in ScratchOAuth2 before commit 1603f04e44ef67dde6ccffe866d2dca16defb293 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.
- Product
- Scratchoauth2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2022An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downCVE-2021-46250 · Other software · Scratchoauth2 Project · reported by MITRECritical 10
An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downstream components that rely on ScratchOAuth2.
- Product
- Scratchoauth2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2022An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089fdd366dd40775d6 alloCVE-2021-46249 · Other software · Scratchoauth2 Project · reported by MITREMedium 6.5
An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089fdd366dd40775d6 allows app owners to set flags that indicate whether an app is verified on their own apps.
- Product
- Scratchoauth2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 7, 2022IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by an integer overflow in iipsrv.fcgi throuCVE-2021-46389 · Other software · High Resolution Streaming Image Server Project · reported by MITREHigh 7.5
IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by an integer overflow in iipsrv.fcgi through malformed HTTP query parameters.
- Product
- High Resolution Streaming Image Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 4, 2022An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2CVE-2021-40403 · Other software · Gerbv Project · reported by talos-cna@cisco.comMedium 6.3
An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.
- Product
- Gerbv
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.fedoraproject.orgtalosintelligence.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.