Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by NVD-CWE-noinfo
Total 22706 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-6178 1 Lenovo 12 Home Media Network Hard Drive, Home Media Network Hard Drive Firmware, Ix12-300r and 9 more 2022-10-13 4.3 MEDIUM 5.3 MEDIUM
An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their contents.
CVE-2019-6168 1 Lenovo 8 Ideacentre, Ideapad, Service Bridge and 5 more 2022-10-13 7.5 HIGH 9.8 CRITICAL
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVE-2019-6167 1 Lenovo 8 Ideacentre, Ideapad, Service Bridge and 5 more 2022-10-13 7.5 HIGH 9.8 CRITICAL
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVE-2020-10009 1 Apple 1 Mac Os X 2022-10-13 4.3 MEDIUM 5.5 MEDIUM
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2020-10007 1 Apple 1 Mac Os X 2022-10-13 2.1 LOW 5.5 MEDIUM
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to determine kernel memory layout.
CVE-2022-34391 1 Dell 4 Alienware Area-51 R4, Alienware Area-51 R4 Firmware, Alienware Area-51 R5 and 1 more 2022-10-13 N/A 7.8 HIGH
Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2022-41606 1 Hashicorp 1 Nomad 2022-10-13 N/A 6.5 MEDIUM
HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash client agents. Fixed in 1.2.13, 1.3.6, and 1.4.0.
CVE-2022-31682 1 Vmware 1 Vrealize Operations 2022-10-13 N/A 4.9 MEDIUM
VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data.
CVE-2022-34432 1 Dell 1 Hybrid Client 2022-10-13 N/A 8.2 HIGH
Dell Hybrid Client below 1.8 version contains a gedit vulnerability. A guest attacker could potentially exploit this vulnerability, allowing deletion of user and some system files and folders.
CVE-2022-38049 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2022-10-13 N/A 7.8 HIGH
Microsoft Office Graphics Remote Code Execution Vulnerability.
CVE-2022-38050 1 Microsoft 4 Windows 10, Windows 11, Windows Server 2019 and 1 more 2022-10-13 N/A 7.8 HIGH
Win32k Elevation of Privilege Vulnerability.
CVE-2022-38051 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2022-10-13 N/A 7.8 HIGH
Windows Graphics Component Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37997.
CVE-2022-38053 1 Microsoft 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server 2022-10-13 N/A 8.8 HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41036, CVE-2022-41037, CVE-2022-41038.
CVE-2022-41031 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2022-10-13 N/A 7.8 HIGH
Microsoft Word Remote Code Execution Vulnerability.
CVE-2022-41033 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2022-10-13 N/A 7.8 HIGH
Windows COM+ Event System Service Elevation of Privilege Vulnerability.
CVE-2022-41034 1 Microsoft 1 Visual Studio Code 2022-10-13 N/A 7.8 HIGH
Visual Studio Code Remote Code Execution Vulnerability.
CVE-2022-37978 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2022-10-13 N/A 7.5 HIGH
Windows Active Directory Certificate Services Security Feature Bypass.
CVE-2022-37977 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2022-10-13 N/A 6.5 MEDIUM
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability.
CVE-2022-37997 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2022-10-13 N/A 7.8 HIGH
Windows Graphics Component Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-38051.
CVE-2022-37980 1 Microsoft 3 Windows 10, Windows 11, Windows Server 2022 2022-10-13 N/A 7.8 HIGH
Windows DHCP Client Elevation of Privilege Vulnerability.