2173 matches found
Exploit for Improper Privilege Management in Wfs Heaven_Burns_Red
EvilWfshbr CVE-2022-42046https://vulners.com/cve/CVE-2022-...
PT-2022-23260 · Dedebiz · Dedebiz
Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6 Description: A remote code execution issue was found in sys info.php, allowing for potential code execution. Recommendations: For DedeBIZ version 6, consider restricting access to the sys info.php file until a patch is...
sqlite (>=0.19.7, <=0.21.1), sqlite3-sys (>=0.6.7, <=0.9.2) +3 more potentially affected by unknown CVE via temporary (0.5.1)
temporary CARGO version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on temporary and may be impacted: - sqlite =0.19.7, =0.6.7, =0.11.0, =0.2.6, =0.2.7 Source cves: unknown CVE Source advisory: OSV:GHSA-2JQ9-6XX7-3H29...
a3mo_lib (>=0.1.0, <=0.1.1), abacuz (0.1.1) +664 more potentially affected by CVE-2022-35737 via libsqlite3-sys (>=0.0.9, <=0.24.2)
libsqlite3-sys CARGO version =0.0.9, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.0.2, =0.2.11, =0.1.0, =1.0.0, =0.0.2-alpha, =0.1.0, =0.4.1 and more Source cves: CVE-2022-35737 Source advisory: OSV:GHSA-JW36-HF63-69R9...
RUSTSEC-2022-0090 `libsqlite3-sys` via C SQLite CVE-2022-35737
It was sometimes possible for SQLite versions = 1.0.12, 3.39.2 to allow an array-bounds overflow when large string were input into SQLite's printf function. As libsqlite3-sys bundles SQLite, it is susceptible to the vulnerability. libsqlite3-sys was updated to bundle the patched version of SQLite...
a3mo_lib (>=0.1.0, <=0.1.1), abacuz (0.1.1) +664 more potentially affected by CVE-2022-35737 via libsqlite3-sys (>=0.0.9, <=0.24.2)
libsqlite3-sys CARGO version =0.0.9, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.0.2, =0.2.11, =0.1.0, =1.0.0, =0.0.2-alpha, =0.1.0, =0.4.1 and more Source cves: CVE-2022-35737 Source advisory: OSV:RUSTSEC-2022-0090...
The vulnerability of the set_sys_time() function implementation in the Robustel R1510 software-defined VPN routers allows a hacker to execute arbitrary commands.
The vulnerability of the setsystime function implementation in Robustel R1510 VPN routers lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending speciall...
[SECURITY] Fedora 36 Update: golang-github-sophaskins-efs2tar-0-0.5.20210317git4db1b0f.fc36
efs2tar is a tool that converts SGI EFS-formatted filesystem images ie, the result of dd-ing a whole device in to a file in to tarballs. It was based entirely on NetBSD's sys/fs/efs...
[SECURITY] Fedora 35 Update: golang-github-sophaskins-efs2tar-0-0.4.20210317git4db1b0f.fc35
efs2tar is a tool that converts SGI EFS-formatted filesystem images ie, the result of dd-ing a whole device in to a file in to tarballs. It was based entirely on NetBSD's sys/fs/efs...
GO-2022-0493 Incorrect privilege reporting in syscall and golang.org/x/sys/unix
When called with a non-zero flags parameter, the Faccessat function can incorrectly report that a file is accessible...
OESA-2022-1748 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: Using the ioctl function to modify the vcfont.height value through PIOFONT can cause the KASAN: vmalloc-out-of-bounds in sysimageblit problem. Requires tty group permissions to access the device file /dev/tty1.CVE-2021-33656...
CVE-2022-33329
Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The /ajax/setsystime/...
golang.org/x/sys/unix has Incorrect privilege reporting in syscall
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Reporting in syscall. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible. Specific Go Packages Affected golang.org/x/sys/unix...
Malicious code in libfuzzer-sys (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d92c76a6cc9a5059441f93a540e6540b1d219fbbbeb718dc19dfeed550206e1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4299 Malicious code in libfuzzer-sys (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d92c76a6cc9a5059441f93a540e6540b1d219fbbbeb718dc19dfeed550206e1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-212 Malicious code in @dsgn-sys/editor-elements-corvid-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7fe3693887a0b35be470744969abc99f121ce0eb8036ce3f5eef87d8cf515c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fedora: Security Advisory for golang-x-sys (FEDORA-2022-1da581ac6d)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-x-sys (FEDORA-2022-725ac93b48)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...