Show filters
221 Total Results
Displaying 51-60 of 221
Sort by:
Attacker Value
Unknown
CVE-2021-26600
Disclosure Date: March 28, 2022 (last updated February 23, 2025)
ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).
0
Attacker Value
Unknown
CVE-2022-0514
Disclosure Date: March 21, 2022 (last updated February 23, 2025)
Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5.
0
Attacker Value
Unknown
CVE-2022-22661
Disclosure Date: March 18, 2022 (last updated February 23, 2025)
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code with kernel privileges.
0
Attacker Value
Unknown
CVE-2021-40061
Disclosure Date: March 10, 2022 (last updated February 23, 2025)
There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity.
0
Attacker Value
Unknown
CVE-2022-0746
Disclosure Date: February 25, 2022 (last updated February 23, 2025)
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0.
0
Attacker Value
Unknown
CVE-2022-21656
Disclosure Date: February 22, 2022 (last updated February 23, 2025)
Envoy is an open source edge and service proxy, designed for cloud-native applications. The default_validator.cc implementation used to implement the default certificate validation routines has a "type confusion" bug when processing subjectAltNames. This processing allows, for example, an rfc822Name or uniformResourceIndicator to be authenticated as a domain name. This confusion allows for the bypassing of nameConstraints, as processed by the underlying OpenSSL/BoringSSL implementation, exposing the possibility of impersonation of arbitrary servers. As a result Envoy will trust upstream certificates that should not be trusted.
0
Attacker Value
Unknown
CVE-2022-0688
Disclosure Date: February 20, 2022 (last updated February 23, 2025)
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.
0
Attacker Value
Unknown
CVE-2022-0689
Disclosure Date: February 19, 2022 (last updated February 23, 2025)
Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.
0
Attacker Value
Unknown
CVE-2021-46463
Disclosure Date: February 14, 2022 (last updated February 23, 2025)
njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise_perform_then().
0
Attacker Value
Unknown
CVE-2022-0102
Disclosure Date: February 12, 2022 (last updated February 23, 2025)
Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
0