PT-2022-5536 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

PT-2022-5531 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

PT-2022-5542 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The vulnerability is related to the handling of SetStaticRouteIPv4Settings requests in the web management portal of D-Link DIR-1935 routers. It allows network-adjacent attackers to execute arbitrary...

PT-2022-5533 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the handling of SetStaticRouteIPv4Settings requests in the web management portal, specifically when parsing subelements within the StaticRouteIPv4Data element. The process does...

PT-2022-5535 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the SetIPv4FirewallSettings function in the web management interface of D-Link DIR-1935 routers, which fails to properly clean input data in a user-supplied string when handlin...

PT-2022-5728 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

GitLab 12.0.0 < 14.9.5 / 14.10.0 < 14.10.4 / 15.0.0 < 15.0.1 (CVE-2022-1935)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker...

PT-2022-5534 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to bypass authentication on affected installations. The specific flaw exists within the handling of HNAP login requests, resulting from the lack of proper...

PT-2022-5532 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the implementation of the Home Network Administration Protocol HNAP in the D-Link DIR-1935 router's firmware, specifically with the authentication procedure. This allows a remo...

PT-2022-5538 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling of...

PT-2022-5539 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

PT-2022-5537 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the handling of SetWebFilterSetting requests in the web management portal of D-Link DIR-1935 routers. Specifically, when parsing the WebFilterURLs element, the process does not...

CVE-2022-1935

creationtimestamp| type| source ---|---|--- 2022-06-06 20:30:11+00:00| seen| https://t.me/cibsecurity/43854...

CVE-2022-1935

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Trigger Token to misuse it from any location even when I...

CVE-2022-1935

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Trigger Token to misuse it from any location even when I...

CVE-2022-1935

Removed by vendor...

CVE-2022-1935

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Trigger Token to misuse it from any location even when I...

CVE-2022-1935

CVE-2022-1935 is an incorrect authorization vulnerability in GitLab EE where an attacker with a valid Project Trigger Token can misuse it from any location, bypassing IP restrictions. Affected releases include: 12.0–14.9.4; 14.10.0–14.10.3; 15.0.0. Remediation (per sources) is to upgrade to: 14.9...

Oracle Linux 8 : php:7.4 (ELSA-2022-1935)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1935 advisory. - fix SSRF bypass in FILTERVALIDATEURL CVE-2021-21705 Tenable has extracted the preceding description block directly from the Oracle Linux security...

AlmaLinux 8 : php:7.4 (ALSA-2022:1935)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1935 advisory. php: Local privilege escalation via PHP-FPM CVE-2021-21703 php: SSRF bypass in FILTERVALIDATEURL CVE-2021-21705 Tenable has extracted the preceding...