Security Vulnerabilities - CVEs Published In 2022
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.
CVSS Score
5.3
EPSS Score
0.005
Published
2022-11-08
Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability.
CVSS Score
7.5
EPSS Score
0.005
Published
2022-11-08
perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-11-08
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-11-08
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-11-08
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-11-08
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFunctionCall.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-11-08
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-11-08
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when called from LexScanGetToken.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-11-08
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0.
CVSS Score
8.8
EPSS Score
0.008
Published
2022-11-08