CVE-2022-1882

A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe postonenotification after freepipeinfo that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2022-1882

CVE-2022-1882: A use-after-free in Linux kernel pipes handling (pipes.post_one_notification after free_pipe_info) allows a local user to crash the system and potentially escalate privileges. Documented in CVE-2022-1882 with CVSS v3 base 7.8 (LOCAL, LOW complexity, user is not required to interact...

CVE-2021-1882

CVE-2021-1882 is a memory corruption vulnerability in Apple software. Connected sources specify an issue that can allow an application to gain elevated privileges, with fixes in Security Update 2021-002 for Catalina, iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11.3. The NVD/NC...

CVE-2020-1882

Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180C185E6R3P3, earlier than 10.0.0.180C432E6R1P7, earlier than 10.0.0.180C636E5R2P3; HUAWEI Mate 20 RS versions earlier than 10.0.0.175C786E70R3P8; HUAWEI Mate 20 X versions earlier than 10.0.0.176C00E70R2P8; and Honor Magic2 versions...

CVE-2020-1882

CVE-2020-1882 affects several Huawei Android devices with an improper authorization vulnerability. Affected: Huawei Ever‑L29B devices pre 10.0.0.180 (C185E6R3P3, C432E6R1P7, C636E5R2P3); Huawei Mate 20 RS pre 10.0.0.175 (C786E70R3P8); Huawei Mate 20 X pre 10.0.0.176 (C00E70R2P8); Honor Magic2 pre...

CVE-2019-1882

The CVE-2019-1882 issue affects Cisco Industrial Network Director. It is a stored XSS vulnerability caused by improper validation of content submitted to the affected application. An authenticated, remote attacker could exploit this by sending requests containing malicious values, enabling stored...

CVE-2018-1882

CVE-2018-1882 affects IBM Spectrum Protect family in atypical configurations where enabling tracing exposes the node password in plain text within the IBM Spectrum Protect client trace file. Affected products and versions include: Backup-Archive Client (8.1.0.0–8.1.6.1 and 7.1.0.0–7.1.8.4), Data ...

Security Bulletin: Password disclosure via trace file affects IBM Spectrum Protect for Space Management (CVE-2018-1882)

Summary When tracing is enabled, the IBM Spectrum Protect Client trace file may display the password in plain text. This affects IBM Spectrum Protect formerly Tivoli Storage Manager for Space Management. Vulnerability Details CVEID: CVE-2018-1882 DESCRIPTION: In a certain atypical IBM Spectrum...

CVE-2017-1882

creationtimestamp| type| source ---|---|--- 2018-12-29 11:37:27+00:00| seen| MISP/5c275bae-8c6c-4d62-8630-4e8902de0b81 2019-01-02 15:46:36+00:00| seen| MISP/5c2cdad0-9338-4c4b-87bc-2be2ac12042b...

CVE-2017-1882

CVE-2017-1882 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-1882

...

washington.edu XSS vulnerability

Vulnerable URL: http://www.washington.edu/alumni%22'--!%3E%3CImage%20SrcSet=K%20OnError=confirm'OPENBUGBOUNTY'%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1882 VIP website...

IBM WebSphere Application Server 8.5.5.x < 8.5.5.5 Multiple Vulnerabilities

Binary data 700047.prm...

IBM WebSphere Application Server Liberty Profile Multiple Vulnerabilities (swg21697368)

IBM WebSphere Application Server Liberty Profile is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-1882

CVE-2016-1882 affects FreeBSD kernels: 9.3 before p33, 10.1 before p26, and 10.2 before p9. A programming error in processing a TCP connection with both TCP_MD5SIG and TCP_NOOPT socket options may cause a kernel crash, enabling a remote attacker to trigger a denial of service. The available docum...

Oracle: Security Advisory (ELSA-2010-0652)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1882

CVE-2015-1882 affects IBM WebSphere Application Server Liberty Profile (8.5.x) prior to 8.5.5.5. It describes multiple race conditions that let remote authenticated users gain elevated privileges by exploiting thread conflicts that execute Java code outside the configured EJB Run-as context. The ...

Microsoft DirectShow MPEG 3 Channel Mode Memory Corruption - Ver2 (CVE-2010-1882)

A memory corruption vulnerability has been reported in Microsoft Windows XP, Microsoft Windows Server 2003 x64 64-bit and Microsoft Windows Server 2003. An attacker could exploit this vulnerability via an MPEG Layer-3 audio stream in a crafted media file or crafted streaming content. Successful...

CVE-2014-1882

Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictions of an event-based bridge via a crafted library clone that leverages IFRAME script execution and directly accesses bridge JavaScript objects, as demonstrated...

CVE-2014-1882

Affected software: Apache Cordova 3.3.0 and earlier; Adobe PhoneGap 2.9.0 and earlier. Root cause: An event-based bridge can be bypassed via a crafted library clone that uses IFRAME script execution to directly access bridge JavaScript objects, demonstrated by cordova.require calls. Impact: Remot...