CentOS 7 : podman (RHSA-2022:2190)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:2190 advisory. - A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded...

CVE-2022-2190

The Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

CVE-2022-2190 Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting

The Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

CVE-2022-2190 Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting

The Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

CVE-2022-2190

CVE-2022-2190 affects the WordPress Gallery Plugin (Envira Gallery Lite) versions prior to 1.8.4.7. The underlying issue is that the plugin does not escape the $_SERVER['REQUEST_URI'] value before outputting it into an HTML attribute, enabling Reflected Cross-Site Scripting in older browsers. Acc...

RHSA-2022:2190

creationtimestamp| type| source ---|---|--- 2022-09-02 00:38:20+00:00| seen| https://t.me/cibsecurity/49198...

CVE-2022-2738

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code executio...

Design/Logic Flaw

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive...

CVE-2022-2739

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive...

CVE-2022-2739

The CVE-2022-2739 entry concerns Red Hat Enterprise Linux 7 Extras where an incorrect podman version released via RHSA-2022:2190 did not include the fix for CVE-2020-14370 (environment-variable leakage). Root cause: the shipped podman version omitted the established remediation, allowing potentia...

CVE-2022-2738

CVE-2022-2738 is described in connected MiracleLinux advisories as a security regression of CVE-2020-8945, caused by a source-code-management issue in podman. The affected component is podman in MiracleLinux 7 (AXSA-2022-3718:02), with explicit note that the regression impacts the Go GPGME bindin...

CVE-2022-2739

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive...

CVE-2022-2738

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code executio...

EulerOS Virtualization 2.9.1 : shim (EulerOS-SA-2022-2190)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli...

CVE-2022-2190

creationtimestamp| type| source ---|---|--- 2022-04-05 07:21:47+00:00| published-proof-of-concept| https://t.me/reconshell/1236 2022-04-09 07:39:13+00:00| published-proof-of-concept| Telegram/-6ODXgzzWCxBZpYl68OshWRdD8e5O8jb0SVarNqOSvRoOA0 2022-10-31 19:37:58+00:00| seen|...