CVE-2022-36866

The CVE-2022-36866 issue affects Samsung’s Broadcaster in Group Sharing prior to versions 13.0.6.15 (Android S 12) and 13.0.6.14 (Android R 11). Root cause: improper access control in Broadcaster allows attackers to identify the device. Affected products and versions are documented in multiple so...

CVE-2022-36866

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

PT-2022-23670 · Google · Android

Name of the Vulnerable Software and Affected Versions: Broadcaster in Group Sharing versions prior to 13.0.6.15 in Android S12 Broadcaster in Group Sharing versions prior to 13.0.6.14 in Android R11 and below Description: The issue is related to improper access control, allowing attackers to...

Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5603-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5603-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...

CVE-2022-2006

AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to...

Code injection

AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a valid user. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73;...

r-rsigns.com Cross Site Scripting vulnerability OBB-2867039

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PYSEC-2022-43067

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

CVE-2021-3701: Incorrect Default Permissions

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

CVE-2022-21181

Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable escalation of privilege via local access...

Information disclosure

Incorrect default permissions for the IntelR Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Insufficiently protected credentials in the IntelR Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-26844

Insufficiently protected credentials in the installation binaries for IntelR SEAPI in all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-22730

The CVE concerns Intel® Edge Insights for Industrial software with improper authentication that could allow an unauthenticated user to escalate privileges via network access. Affected product: Intel® Edge Insights for Industrial software prior to version 2.6.1. Root cause: improper authentication...

PT-2022-14927

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi products affected versions not specified Description The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-25841: Uncontrolled Search Path Element

Uncontrolled search path elements in the IntelR Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26017: Undefined Security Weakness

Improper access control in the IntelR DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-21139: Inadequate Encryption Strength

Inadequate encryption strength for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2021-44545

Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-44545: Improper Input Validation

Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...