PT-2022-33955 · Linux · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM versions prior to v5.15.61 Linux Kernel versions prior to v5.15.61 Description: The issue concerns a snapshot pre-VM-Enter DEBUGCTL for the !nested run pending case in KVM's nVMX. The actual impact and attack plausibility have not yet bee...

PT-2022-33474 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the removal of a UUID from the s390 debug log in the vfio/ccw component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2024-22131

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.13 Description An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulnerability. The XSS will only trigger if the administrator navigates through the deb...

CVE-2022-28170. Brocade Fabric OS Web Application services store server and user passwords in the debug statements.

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file. Affected Product All Brocade Fabric OS versions...

CVE-2022-28170. Brocade Fabric OS Web Application services store server and user passwords in the debug statements.

Security Advisory ID : BSA-2022-2076 Component : FOS Revision : 1.1 Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file...

PT-2022-5069 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 7.4.2j Description: The issue is related to the storage of critical informatio...

PT-2022-24412 · Cms8000 · Cms8000

Name of the Vulnerable Software and Affected Versions: CMS8000 device affected versions not specified Description: The issue concerns the compilation settings of multiple binary application files on the CMS8000 device. These files are compiled with 'not stripped' and 'debug info' settings, which...

CVE-2022-36601

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands...

CVE-2022-36601

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands...

CVE-2022-36601

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands...

Command injection

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands...

CVE-2022-36601

The CVE-2022-36601 issue affects JasMiner-X4-Server versions 20220621-090907 and earlier. The Eclipse TCF debug interface is open on port 1534, allowing unauthenticated attackers to gain root privileges and access sensitive data or execute arbitrary commands. There is no publicly disclosed exploi...

Contec Health CMS8000 Patient Monitor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Low attack complexity Vendor: Contec Health Equipment: CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor Vulnerabilities: Improper Access Control, Uncontrolled Resource Consumption, Use of Hard-Coded Credentials, Active Debug Code 2. RISK EVALUATION...

PT-2022-23497 · Eclipse · Eclipse Tcf

Name of the Vulnerable Software and Affected Versions: JasMiner-X4-Server versions 20220621-090907 and below Description: The Eclipse TCF debug interface is open on port 1534, allowing unauthenticated attackers to gain root privileges on the affected device, access sensitive data, or execute...

PT-2022-24219

Name of the Vulnerable Software and Affected Versions binutils affected versions not specified Description An assertion failure in the display debug names function in binutils/dwarf.c may lead to a program crash and denial of service. This issue was initially reported but later withdrawn by its C...

CVE-2022-36601: Undefined Security Weakness

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands...

PT-2022-24221 · Gnu · Binutils

Name of the Vulnerable Software and Affected Versions: binutils affected versions not specified Description: The issue is related to an infinite loop that may be triggered in the display debug abbrev function in binutils/dwarf.c when opening a crafted ELF file. This could lead to a denial of...

GHSA-WMQQ-R32M-87C5 python-oslo-utils has improper password parsing

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

python-oslo-utils has improper password parsing

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...