Security Vulnerabilities - CVEs Published In 2022
Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack URL.
CVSS Score
8.8
EPSS Score
0.013
Published
2022-08-31
An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.
CVSS Score
7.5
EPSS Score
0.019
Published
2022-08-31
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php.
CVSS Score
6.1
EPSS Score
0.005
Published
2022-08-30
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php.
CVSS Score
6.1
EPSS Score
0.005
Published
2022-08-30
Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().
CVSS Score
6.1
EPSS Score
0.007
Published
2022-08-30
PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.
CVSS Score
6.1
EPSS Score
0.005
Published
2022-08-30
RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.
CVSS Score
9.8
EPSS Score
0.028
Published
2022-08-30
HCL VersionVault Express exposes administrator credentials.
CVSS Score
6.0
EPSS Score
0.005
Published
2022-08-30
An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.
CVSS Score
7.5
EPSS Score
0.008
Published
2022-08-30
XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-08-30