Improper access control

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R11, 10.5.03.77 in Android Q10 and 9.0.6.68 in Android P9 allows untrusted applications to take a picture in screenlock status...

CVE-2022-23998

The CVE-2022-23998 entry documents an improper access control vulnerability in the Camera app on Android devices (pre-11.1.02.16 for Android R, pre-10.5.03.77 for Android Q, pre-9.0.6.68 for Android P). The issue allows untrusted applications to capture a photo while the device is screen-locked. ...

Mageia: Security Advisory (MGASA-2017-0195)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : OpenShift Container Storage 3.11.z (RHSA-2022:0308)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0308 advisory. The OpenShift Container Storage solution provides persistent storage service for OpenShift Containers and OpenShift Infrastructure services...

PT-2022-12282

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description The issue is related to an assertion failure in the ecma object is typedarray obj p function at /jerry-core/ecma/operations/ecma-typedarray-object.c in Jerryscript. Recommendations For Jerryscript version...

PT-2022-37136

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a heap-buffer-overflow crash, specifically a WRITE crash. The crash involves the cli regcomp real function and occurs during the...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.15 and fixes at least the following security issues: A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS...

Important: Red Hat Security Advisory: security update of rh-sso-7/sso75 container images for IBM P/Z

A security update is now available for Red Hat Single Sign-On 7.5 container images for IBM P/Z. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

p-supply.co.jp Cross Site Scripting vulnerability OBB-2289313

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-3769

Vulnerability in pygmalion, pygmalion-virtualenv and refined themes Description: these themes use print -P on user-supplied strings to print them to the terminal. All of them do that on git information, particularly the branch name, so if the branch has a specially-crafted name the vulnerability...

Command injection

Vulnerability in rand-quote and hitokoto plugins Description: the rand-quote and hitokoto fetch quotes from quotationspage.com and hitokoto.cn respectively, do some process on them and then use print -P to print them. If these quotes contained the proper symbols, they could trigger command...

CVE-2021-3769

Vulnerability in pygmalion, pygmalion-virtualenv and refined themes Description: these themes use print -P on user-supplied strings to print them to the terminal. All of them do that on git information, particularly the branch name, so if the branch has a specially-crafted name the vulnerability...

CVE-2021-3727: Improper Neutralization of Special Elements used in an OS Command

Vulnerability in rand-quote and hitokoto plugins Description: the rand-quote and hitokoto fetch quotes from quotationspage.com and hitokoto.cn respectively, do some process on them and then use print -P to print them. If these quotes contained the proper symbols, they could trigger command...

CVE-2021-3769: Improper Neutralization of Special Elements used in an OS Command

Vulnerability in pygmalion, pygmalion-virtualenv and refined themes Description: these themes use print -P on user-supplied strings to print them to the terminal. All of them do that on git information, particularly the branch name, so if the branch has a specially-crafted name the vulnerability...

PT-2021-21809

Name of the Vulnerable Software and Affected Versions pygmalion theme affected versions not specified pygmalion-virtualenv theme affected versions not specified refined theme affected versions not specified Description The vulnerability exists in the pygmalion, pygmalion-virtualenv, and refined...

CentOS 8 : grafana (CESA-2021:4226)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4226 advisory. - grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call CVE-2021-27358 - golang: crypto/elliptic:...

golang: crypto/elliptic: incorrect operations on the P-224 curve

A flaw detected in golang: crypto/elliptic, in which P-224 keys as generated can return incorrect inputs, reducing the strength of the cryptography. The highest threat from this vulnerability is confidentiality and integrity...

golang: crypto/elliptic: incorrect operations on the P-224 curve

A flaw detected in golang: crypto/elliptic, in which P-224 keys as generated can return incorrect inputs, reducing the strength of the cryptography. The highest threat from this vulnerability is confidentiality and integrity...

Unauthorized Access Vulnerability in H3C GR1108-P

H3C GR1108-P is a new generation of high-performance enterprise router from H3C. An unauthorized access vulnerability exists in the H3C GR1108-P, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in H3C GR1100-P

H3C GR1100-P is a new generation of high-performance enterprise router from H3C. An unauthorized access vulnerability exists in the H3C GR1100-P, which can be exploited by an attacker to obtain sensitive information...