CVE-2023-22254 AEM Reflected XSS Arbitrary code execution

Experience Manager versions 6.5.15.0 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

Oracle Linux 7 : squid (ELSA-2022-22254)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-22254 advisory. - 7:4.11-3.0.1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

CVE-2022-22254

A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-22254

A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-22254

The CVE-2022-22254 entry describes a permission bypass in Huawei HarmonyOS where NFC CAs can access the TEE, potentially exposing data confidentiality. This implies a lack of proper authorization checks during NFC CA–TEE interactions. The vulnerability is associated with high severity (CVSS 3.1: ...

CVE-2021-22254

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

CVE-2021-22254

GitLab CVE-2021-22254 affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7, and 13.12.9. Under very specific conditions, a user could be impersonated via GitLab shell. The connected documents provide the same vulnerability description and affected version ranges but do not specify a root ca...