Latest CVE Feed
-
5.5
MEDIUMCVE-2022-29114
Windows Print Spooler Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_8.1 windows_rt_8.1 windows_server_2012 windows_server_2016 windows_server_2019 windows_server windows_10_1607 windows_10_1809 windows_10_20h2 +10 more products- EPSS Score: %0.21
- Published: May. 10, 2022
- Modified: Jan. 02, 2025
-
5.5
MEDIUMCVE-2022-2869
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening... Read more
- EPSS Score: %0.01
- Published: Aug. 17, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-28262
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo... Read more
- EPSS Score: %0.86
- Published: May. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-28263
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo... Read more
- EPSS Score: %0.86
- Published: May. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-26933
Windows NTFS Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_8.1 windows_rt_8.1 windows_server_2012 windows_server_2016 windows_server_2019 windows_server windows_10_1607 windows_10_1809 windows_10_20h2 +10 more products- EPSS Score: %0.68
- Published: May. 10, 2022
- Modified: Jan. 02, 2025
-
5.5
MEDIUMCVE-2022-25641
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Inc... Read more
- EPSS Score: %0.13
- Published: Aug. 29, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-24493
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +12 more products- EPSS Score: %0.44
- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software.... Read more
Affected Products : support_assistant- EPSS Score: %0.30
- Published: Jan. 28, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-23034
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any... Read more
- EPSS Score: %0.12
- Published: Jan. 25, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-22583
A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access restricted files.... Read more
- EPSS Score: %0.09
- Published: Mar. 18, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-22234
An Improper Preservation of Consistency Between Independent Representations of Shared State vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a locally authenticated attacker with low privileges to cause a Denial of S... Read more
Affected Products : junos ex2300 ex2300-24mp ex2300-24p ex2300-24t ex2300-48mp ex2300-48p ex2300-48t ex2300-c ex2300m +1 more products- EPSS Score: %0.07
- Published: Oct. 18, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-22011
Windows Graphics Component Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server windows_10_1607 +11 more products- EPSS Score: %0.62
- Published: May. 10, 2022
- Modified: Jan. 02, 2025
-
5.5
MEDIUMCVE-2022-21906
Windows Defender Application Control Security Feature Bypass Vulnerability... Read more
Affected Products : windows_10 windows_server_2019 windows_server windows_10_1809 windows_10_20h2 windows_10_21h2 windows_server_2022 windows_11_21h2 windows_11 windows +3 more products- EPSS Score: %0.91
- Published: Jan. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-21527
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol... Read more
Affected Products : fedora active_iq_unified_manager mysql oncommand_insight oncommand_workflow_automation snapcenter mysql_server- EPSS Score: %0.17
- Published: Jul. 19, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-21479
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol... Read more
- EPSS Score: %0.20
- Published: Apr. 19, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-21478
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol... Read more
- EPSS Score: %0.14
- Published: Apr. 19, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-21463
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes... Read more
- EPSS Score: %0.09
- Published: Apr. 19, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-2084
Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.... Read more
- EPSS Score: %0.03
- Published: Apr. 19, 2023
- Modified: Feb. 05, 2025
-
5.5
MEDIUMCVE-2022-0382
An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limi... Read more
Affected Products : linux_kernel- EPSS Score: %0.05
- Published: Feb. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-1623
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.... Read more
- EPSS Score: %0.07
- Published: May. 11, 2022
- Modified: Nov. 21, 2024