Do Son CVE-2022-33684 can be exploited to launch a MITM attack and gain access to the communication channel between endpoints
Vulnerability
CVE-2022-32287 allows attacker to traverse directories on the system, caused by improper validation of user-supplied input in a FileUtil class
As a result, successful exploitation of CVE-2022-1786 via executing a specially-crafted program could lead to a system crash.
A remote authenticated attacker could exploit the CVE-2022-42719 vulnerability to execute arbitrary code or cause the system to crash
The security hole that allows HTTP header injection is tracked as CVE-2022-34165, and this is "caused by improper validation."
CVE-2022-34918 is a heap buffer overflow due to a weak check and has been introduced within the netfilter which can be exploited
VMware issued a security bulletin to disclose a SpEL Expression injection vulnerability (CVE-2022-22980) in Spring Data MongoDB
A security researcher has discovered that the Linux kernel is affected by a potentially serious vulnerability (CVE-2022-1516)
Linux kernel maintainers issued a risk notice for the Linux Kernel privilege escalation flaw, the vulnerability number is CVE-2022-32250
Pwn2Own Vancouver 2022 hacking contest is currently underway, and products from companies including Microsoft, has all been defeated by hackers
The Linux Kernel team has fixed the CVE-2022-0847 vulnerability in versions 5.16.11, 5.15.25, and 5.10.102. POC and EXP have been disclosed