5104 vulnerabilidades Orden: CVSS EPSS Año ID
CVE-2022-1775
polonel/trudesk General
8.4
HIGH
EPSS
0.3%
2022 CWE-521 1 PoC

Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2.

CVE-2022-22057
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables General
8.4
HIGH
EPSS
2.6%
2022 2 PoCs

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVE-2022-23862
Software Genérico General
8.4
HIGH
EPSS
1.8%
2022 2 PoCs

A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the "NT Authority\System" user, an attacker is able to use the vulnerability to execute arbitrary code and elevate to the system user.

CVE-2022-0351
vim/vim General
8.4
HIGH
EPSS
0.1%
2022 CWE-786 3 PoCs

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.

CVE-2022-41562
TIBCO JasperReports Server Web Cloud
8.4
HIGH
EPSS
0.9%
2022 1 PoC

The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and TIBCO JasperReports Server for Microsoft Azure contains an easily exploitable vulnerability that allows a privileged/administrative attacker with network access to execute an XSS attack on the affected system. A successful attack using this vulner

CVE-2022-0417
vim/vim General
8.4
HIGH
EPSS
0.3%
2022 CWE-122 1 PoC

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.

CVE-2022-0185
🔥 KEV kernel Web
8.4
HIGH
EPSS
2.3%
2022 CWE-190 10 PoCs

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

CVE-2022-1803
polonel/trudesk General
8.4
HIGH
EPSS
0.3%
2022 CWE-1021 1 PoC

Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2.

CVE-2022-0714
vim/vim General
8.4
HIGH
EPSS
0.3%
2022 CWE-122 2 PoCs

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.

CVE-2022-42271
NVIDIA DGX Servers General
8.4
HIGH
EPSS
0.2%
2022 CWE-120 1 PoC

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution

CVE-2022-0685
vim/vim General
8.4
HIGH
EPSS
0.5%
2022 CWE-823 2 PoCs

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.

CVE-2022-0916
Options Web
8.4
HIGH
EPSS
0.1%
2022 CWE-287 1 PoC

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

CVE-2022-0570
mruby/mruby General
8.4
HIGH
EPSS
0.2%
2022 CWE-122 1 PoC

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

CVE-2022-0629
vim/vim General
8.4
HIGH
EPSS
1.9%
2022 CWE-121 2 PoCs

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2022-0443
vim/vim General
8.4
HIGH
EPSS
0.2%
2022 CWE-416 1 PoC

Use After Free in GitHub repository vim/vim prior to 8.2.

CVE-2022-23428
Samsung Mobile Devices with Exynos chipsets General
8.4
HIGH
EPSS
0.0%
2022 CWE-120 1 PoC

An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

CVE-2022-22077
Snapdragon Mobile General
8.4
HIGH
EPSS
0.1%
2022 1 PoC

Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile

CVE-2022-0572
vim/vim General
8.4
HIGH
EPSS
1.8%
2022 CWE-122 2 PoCs

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2022-0393
vim/vim General
8.4
HIGH
EPSS
0.1%
2022 CWE-125 1 PoC

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVE-2022-1258
McAfee Agent ePO extension Database
8.4
HIGH
EPSS
0.2%
2022 CWE-89 1 PoC

A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server.