Threat database

739 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 1.6%	CVE-2022-37265n/a · n/a Critical9.8EPSS 1.6%2022-09-20CVE Database V5CVE-2022-37265 Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js. EPSS 1.6%Vulnerability	CVE Database V5	2022-09-20
High	7.5	EPSS 1.3%	CVE-2022-37259n/a · n/a High7.5EPSS 1.3%2022-09-20CVE Database V5CVE-2022-37259 A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js. EPSS 1.3%Vulnerability	CVE Database V5	2022-09-20
High	7.5	EPSS 0.9%	CVE-2022-39974n/a · n/a High7.5EPSS 0.9%2022-09-20CVE Database V5CVE-2022-39974 WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h. EPSS 0.9%Vulnerability	CVE Database V5	2022-09-20
High	7.5	EPSS 0.7%	CVE-2016-20015n/a · n/a High7.5EPSS 0.7%2022-09-20CVE Database V5CVE-2016-20015 In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown. EPSS 0.7%Vulnerability	CVE Database V5	2022-09-20
Critical	9.8	EPSS 1.1%	CVE-2017-20148n/a · n/a Critical9.8EPSS 1.1%2022-09-20CVE Database V5CVE-2017-20148 In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive chown calls. EPSS 1.1%Vulnerability	CVE Database V5	2022-09-20
Critical	9.8	EPSS 2.3%	CVE-2022-41138n/a · n/a Critical9.8EPSS 2.3%2022-09-20CVE Database V5CVE-2022-41138 In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution. EPSS 2.3%Vulnerability	CVE Database V5	2022-09-20
Medium	6.5	EPSS 1.0%	CVE-2017-20147n/a · n/a Medium6.5EPSS 1.0%2022-09-20CVE Database V5CVE-2017-20147 In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-20
Critical	9.8	EPSS 1.5%	CVE-2022-37204n/a · n/a Critical9.8EPSS 1.5%2022-09-20CVE Database V5CVE-2022-37204 Final CMS 5.1.0 is vulnerable to SQL Injection. EPSS 1.5%Vulnerability	CVE Database V5	2022-09-20
Critical	9.8	EPSS 18%	CVE-2022-38916n/a · n/a Critical9.8EPSS 18%2022-09-20CVE Database V5CVE-2022-38916 A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files EPSS 18%Vulnerability	CVE Database V5	2022-09-20
High	8.8	EPSS 0.5%	CVE-2022-35196n/a · n/a High8.8EPSS 0.5%2022-09-20CVE Database V5CVE-2022-35196 TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php. EPSS 0.5%Vulnerability	CVE Database V5	2022-09-20
Critical	9.1	EPSS 1.4%	CVE-2022-38340n/a · n/a Critical9.1EPSS 1.4%2022-09-20CVE Database V5CVE-2022-38340 Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataupload. EPSS 1.4%Vulnerability	CVE Database V5	2022-09-20
Medium	5.4	EPSS 0.5%	CVE-2022-38550n/a · n/a Medium5.4EPSS 0.5%2022-09-19CVE Database V5CVE-2022-38550 A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. EPSS 0.5%Vulnerability	CVE Database V5	2022-09-19
Medium	6.5	EPSS 1.0%	CVE-2022-35068n/a · n/a Medium6.5EPSS 1.0%2022-09-19CVE Database V5CVE-2022-35068 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e420d. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-19
Medium	6.5	EPSS 0.9%	CVE-2022-35067n/a · n/a Medium6.5EPSS 0.9%2022-09-19CVE Database V5CVE-2022-35067 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b0. EPSS 0.9%Vulnerability	CVE Database V5	2022-09-19
Medium	6.5	EPSS 0.9%	CVE-2022-35066n/a · n/a Medium6.5EPSS 0.9%2022-09-19CVE Database V5CVE-2022-35066 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b8. EPSS 0.9%Vulnerability	CVE Database V5	2022-09-19
Medium	6.5	EPSS 1.0%	CVE-2022-35065n/a · n/a Medium6.5EPSS 1.0%2022-09-19CVE Database V5CVE-2022-35065 OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-19
Medium	6.5	EPSS 1.0%	CVE-2022-35064n/a · n/a Medium6.5EPSS 1.0%2022-09-19CVE Database V5CVE-2022-35064 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in __asan_memset. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-19
Medium	6.5	EPSS 1.0%	CVE-2022-35063n/a · n/a Medium6.5EPSS 1.0%2022-09-19CVE Database V5CVE-2022-35063 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-19
Medium	6.5	EPSS 1.0%	CVE-2022-35062n/a · n/a Medium6.5EPSS 1.0%2022-09-19CVE Database V5CVE-2022-35062 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0bc3. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-19
Medium	6.5	EPSS 1.0%	CVE-2022-35061n/a · n/a Medium6.5EPSS 1.0%2022-09-19CVE Database V5CVE-2022-35061 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e412a. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-19

Showing 581–600 of 739 results