PT-2022-22188

Name of the Vulnerable Software and Affected Versions Radare2 version 5.7.2 Description The issue is related to a NULL pointer dereference via the function r bin file xtr load buffer at bin/bfile.c. This allows attackers to cause a Denial of Service DOS via a crafted binary file. Recommendations...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-2054)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-21094

Name of the Vulnerable Software and Affected Versions Rhonabwy versions prior to 1.1.5 Description The issue is related to a buffer overflow via the component r jwe aesgcm key unwrap. This allows attackers to cause a Denial of Service DoS via a crafted JWE token. Recommendations For versions prio...

PT-2022-6330

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to non-transparent sharing of return predictor targets between contexts in some IntelR Processors, which may allow an authorized user to potentially enable...

SUSE: Security Advisory (SUSE-SU-2022:2281-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

r-kmv.ru Open Redirect vulnerability OBB-2732139

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series Improper Resource Locking (CVE-2022-24946)

Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC-Q Series Q03UDECPU all versions, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU all versions, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number 24051 and prior,...

validate-data denial-of-service vulnerability (CNVD-2022-66399)

validate-data is a NodeJs backend library by Anoop P R Individual Developer. It is used to validate data according to the provided rules. A denial of service vulnerability exists in validate-data version v0.1.1, which stems from not properly handling incoming error messages and can be exploited b...

PT-2022-37048

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash occurred, involving the functions pdfi dict get no store R inner, pdfi dict get no store R key, and pdfi find resource...

Malicious code in gap-r (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e263e9376a1da867b496d527ea61914dca310bce0b7621229f5ee2d3c5038800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-36650

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves several functions: r str utf8 codepoint, r st...

CVE-2022-31246

paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request e.g., within QR code data. On Windows, this can lead to capture of credentials over SMB. On Linux and UNIX, it can lead to a denial of service by specifying the /dev/zero filename...

Information Disclosure

Iintel-microcode is vulnerable to information disclosure. The vulnerability exists due to incomplete cleanup in specific special register read operations for some IntelR Processors which may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21166

Incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21127

Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21125

Incomplete cleanup of microarchitectural fill buffers on some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21123

Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21180: Improper Input Validation

Improper input validation for some IntelR Processors may allow an authenticated user to potentially cause a denial of service via local access...

CVE-2022-24436: Observable Discrepancy

Observable behavioral in power management throttling for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2022-21123: Incomplete Cleanup

Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...