CVE Vulnerability

CVE-2022-2285

by

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.

CVE-2022-22847

by

Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services (either by an authenticated attacker, or in a configuration that does not require authentication).

CVE-2022-22846

by

The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query.

CVE-2022-22845

by

QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers’ installations.

CVE-2022-22844

by

LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.

CVE-2022-2284

by

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.