Latest CVE Feed
-
5.5
MEDIUMCVE-2022-36145
SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::Reader::getWord().... Read more
Affected Products : swfmill- EPSS Score: %0.05
- Published: Aug. 16, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-36140
SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::DeclareFunction2::write(SWF::Writer*, SWF::Context*).... Read more
Affected Products : swfmill- EPSS Score: %0.05
- Published: Aug. 16, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-25725
In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly... Read more
- EPSS Score: %0.18
- Published: Nov. 21, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-36056
Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure. In versions prior to 1.12.0 a number of vulnerabilities have been found in cosign verify-blob, where Cosign would successfully verify an artifact w... Read more
Affected Products : cosign- EPSS Score: %0.01
- Published: Sep. 14, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-25598
An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchronisation primitive. A buggy error path in the XENMEM_acquire_resource exits without releasing an... Read more
- EPSS Score: %0.07
- Published: Sep. 23, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-25596
An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and ... Read more
- EPSS Score: %0.03
- Published: Sep. 23, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-35883
NULL pointer dereference in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access.... Read more
- EPSS Score: %0.05
- Published: Feb. 16, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-35709
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploita... Read more
- EPSS Score: %0.04
- Published: Sep. 19, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-34723
Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability... Read more
- EPSS Score: %1.25
- Published: Sep. 13, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-34683
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may lead to denial of service.... Read more
- EPSS Score: %0.04
- Published: Dec. 30, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-34681
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler, where improper input validation of a display-related data structure may lead to denial of service.... Read more
- EPSS Score: %0.04
- Published: Dec. 30, 2022
- Modified: Apr. 10, 2025
-
5.5
MEDIUMCVE-2020-21679
Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.... Read more
Affected Products : graphicsmagick- EPSS Score: %0.09
- Published: Aug. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-34386
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive... Read more
- EPSS Score: %0.06
- Published: Feb. 11, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-34385
SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive inf... Read more
- EPSS Score: %0.04
- Published: Feb. 11, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-34264
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigation... Read more
- EPSS Score: %0.26
- Published: Aug. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-34262
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASL... Read more
- EPSS Score: %0.26
- Published: Aug. 11, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-21490
An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.... Read more
Affected Products : binutils- EPSS Score: %0.02
- Published: Aug. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-34244
Adobe Photoshop versions 22.5.7 (and earlier) and 23.3.2 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations ... Read more
- EPSS Score: %0.17
- Published: Jul. 15, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-17521
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating sys... Read more
- EPSS Score: %0.36
- Published: Dec. 07, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-33917
An issue was discovered in the Arm Mali GPU Kernel Driver (Valhall r29p0 through r38p0). A non-privileged user can make improper GPU processing operations to gain access to already freed memory.... Read more
Affected Products : valhall_gpu_kernel_driver- EPSS Score: %1.04
- Published: Aug. 02, 2022
- Modified: Nov. 21, 2024