Latest CVE Feed
-
7.8
HIGHCVE-2022-27492
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.... Read more
Affected Products : whatsapp- Published: Sep. 23, 2022
- Modified: May. 22, 2025
-
8.8
HIGHCVE-2022-26700
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to code execution.... Read more
- Published: Sep. 23, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2022-23952
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.... Read more
Affected Products : keylime- Published: Sep. 21, 2022
- Modified: May. 22, 2025
-
9.1
CRITICALCVE-2022-23144
There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.... Read more
- Published: Sep. 23, 2022
- Modified: May. 22, 2025
-
8.8
HIGHCVE-2022-22624
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.... Read more
- Published: Sep. 23, 2022
- Modified: May. 22, 2025
-
8.8
HIGHCVE-2022-22610
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to code execution.... Read more
- Published: Sep. 23, 2022
- Modified: May. 22, 2025
-
5.5
MEDIUMCVE-2022-20019
In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP... Read more
- Published: Jan. 04, 2022
- Modified: May. 22, 2025
-
6.7
MEDIUMCVE-2022-20014
In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05857308; Issue... Read more
- Published: Jan. 04, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2021-45116
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or... Read more
- Published: Jan. 05, 2022
- Modified: May. 22, 2025
-
6.6
MEDIUMCVE-2021-3782
An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large... Read more
Affected Products : wayland- Published: Sep. 23, 2022
- Modified: May. 22, 2025
-
9.8
CRITICALCVE-2021-39990
The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience.... Read more
Affected Products : harmonyos- Published: Jan. 03, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2021-39989
The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability may cause a process to restart.... Read more
Affected Products : harmonyos- Published: Jan. 03, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2021-39988
The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.... Read more
Affected Products : harmonyos- Published: Jan. 03, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2021-39987
The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart.... Read more
Affected Products : harmonyos- Published: Jan. 03, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2021-39985
The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a process to restart.... Read more
Affected Products : harmonyos- Published: Jan. 03, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2021-39984
Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service.... Read more
Affected Products : harmonyos- Published: Jan. 03, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2021-39983
The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart.... Read more
Affected Products : harmonyos- Published: Jan. 03, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2021-39977
The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.... Read more
Affected Products : harmonyos- Published: Jan. 03, 2022
- Modified: May. 22, 2025
-
7.5
HIGHCVE-2021-39967
There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.... Read more
- Published: Jan. 03, 2022
- Modified: May. 22, 2025
-
8.8
HIGHCVE-2021-37198
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web ... Read more
Affected Products : comos- Published: Jan. 11, 2022
- Modified: May. 22, 2025