CVE Vulnerability Catalog

Removing an XSLT parameter during processing could have led to an exploitable use-after-free. There have been reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.

A type confusion issue in Safari, iOS, iPadOS, macOS, and tvOS. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of reports that this issue may have been actively exploited.

Windows SmartScreen Security Feature Bypass Vulnerability. Details are not provided in the description.

Podatność CVE-2022-27518 umożliwia zdalne wykonanie dowolnego kodu bez uwierzytelnienia. Atakujący może wykorzystać tę lukę do przejęcia kontroli nad systemem.

Cacti contains a command injection vulnerability in remote_agent.php that allows an unauthenticated attacker to execute arbitrary code on the server. The attacker can bypass authentication by spoofing an HTTP header (e.g., Forwarded-For) and then inject commands via the poller_id parameter. A poller_item with the POLLER_ACTION_SCRIPT_PHP action must exist, which is likely on production instances.

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.

mDNSResponder.exe is vulnerable to a DLL Sideloading attack. The executable improperly specifies how to load the DLL, from which folder and under what conditions. An attacker could use the legitimate executable to load malicious files.

A remote code execution vulnerability in Windows Scripting Languages.

Elevation of privilege vulnerability in Windows CNG Key Isolation Service. An attacker could exploit it to gain elevated privileges.

Security feature bypass vulnerability in Windows Mark of the Web. It allows an attacker to bypass security protections related to files downloaded from the internet.

Elevation of privilege vulnerability in Microsoft Exchange Server. Allows an attacker to elevate their privileges in the system.

Elevation of privilege vulnerability in Windows Print Spooler. An attacker could exploit it to gain elevated privileges.

Security feature bypass vulnerability in Windows Mark of the Web. It allows an attacker to bypass security protections related to files downloaded from the internet.

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The vulnerabilities exist within the underlying protocol used by the component and may allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user.

Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

An out-of-bounds write issue in iOS and iPadOS. This issue is fixed in iOS 15.7.1, iPadOS 15.7.1, iOS 16.1, and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.