pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a file name.
Author: National Vulnerability Database
Vulnerabilities
CVE-2022-41443
by National Vulnerability Database •
phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.php.
Vulnerabilities
CVE-2022-33882
by National Vulnerability Database •
Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operation in Autodesk desktop app (ADA). An attacker could leverage this vulnerability to escalate privileges and execute …
Vulnerabilities
CVE-2022-42306
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbx_exchange during registration and cause a NULL pointer exception, effectively crashing the pbx_exchange…
Vulnerabilities
CVE-2022-42306 (netbackup)
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbx_exchange during registration and cause a NULL pointer exception, effectively crashing the pbx_exchange…
Vulnerabilities
CVE-2022-42307 (netbackup)
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the DiscoveryService service.
Vulnerabilities
CVE-2022-42308
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can delete arbitrary files by leveraging a path traversal in the pbx_exchange registration code.
Vulnerabilities
CVE-2022-42308 (netbackup)
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can delete arbitrary files by leveraging a path traversal in the pbx_exchange registration code.
Vulnerabilities
CVE-2022-42307
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the DiscoveryService service.
Vulnerabilities
CVE-2022-42305
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service.
Vulnerabilities
CVE-2022-42304 (netbackup)
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting idm, nbars, and SLP manager code.
Vulnerabilities
CVE-2022-42303 (netbackup)
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT service by leveraging CVE-2022-42302.
Vulnerabilities
CVE-2022-42303
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT service by leveraging CVE-2022-42302.
Vulnerabilities
CVE-2022-42305 (netbackup)
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service.
Vulnerabilities
CVE-2022-42304
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting idm, nbars, and SLP manager code.
Vulnerabilities
CVE-2022-42301
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) injection attack through the nbars process.
Vulnerabilities
CVE-2022-42300
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server nbars process can be crashed resulting in a denial of service. (Note: the watchdog service will automatically restart the process.)
Vulnerabilities
CVE-2022-42301 (netbackup)
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) injection attack through the nbars process.
Vulnerabilities
CVE-2022-42302
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting the NBFSMCLIENT service.
Vulnerabilities
CVE-2022-42300 (netbackup)
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server nbars process can be crashed resulting in a denial of service. (Note: the watchdog service will automatically restart the process.)
Vulnerabilities
CVE-2022-42299
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service.
Vulnerabilities
CVE-2022-42299 (netbackup)
by National Vulnerability Database •
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service.
Vulnerabilities
CVE-2022-41301
by National Vulnerability Database •
A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the curr…
Vulnerabilities
CVE-2022-40721
by National Vulnerability Database •
Arbitrary file upload vulnerability in php uploader
Vulnerabilities
CVE-2022-40764
by National Vulnerability Database •
Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original d…
Vulnerabilities
CVE-2022-33887
by National Vulnerability Database •
A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.
Vulnerabilities
CVE-2022-33888
by National Vulnerability Database •
A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the c…
Vulnerabilities
CVE-2022-33886
by National Vulnerability Database •
A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which ca…
Vulnerabilities
CVE-2022-33889
by National Vulnerability Database •
A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.
Vulnerabilities
CVE-2022-33890
by National Vulnerability Database •
A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the curr…
Vulnerabilities
CVE-2022-33883 (advanced_material_exchange, moldflow_adviser, moldflow_communicator, moldflow_synergy)
by National Vulnerability Database •
A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities…
Vulnerabilities
CVE-2022-33884
by National Vulnerability Database •
Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Vulnerabilities
CVE-2022-33883
by National Vulnerability Database •
A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities…
Vulnerabilities
CVE-2022-33885
by National Vulnerability Database •
A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.
Vulnerabilities
CVE-2022-41430
by National Vulnerability Database •
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux.
Vulnerabilities
CVE-2022-41429
by National Vulnerability Database •
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag.
Vulnerabilities
CVE-2022-41430 (bento4)
by National Vulnerability Database •
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux.
Vulnerabilities
CVE-2022-41429 (bento4)
by National Vulnerability Database •
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag.
Vulnerabilities
CVE-2022-41428
by National Vulnerability Database •
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux.
Vulnerabilities
CVE-2022-41427
by National Vulnerability Database •
Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4_AvcFrameParser::Feed function in mp4mux.