Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5515-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5515-1 advisory. Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in...

USN-5515-1: Linux kernel vulnerabilities

Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in some situations. A local attacker could possibly use this to gain administrative privileges. CVE-2021-4197 Jann Horn discovered that the FUSE file system i...

USN-5514-1: Linux kernel vulnerabilities

It was discovered that the implementation of the 6pack and mkiss protocols in the Linux kernel did not handle detach events properly in some situations, leading to a use-after-free vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-1195...

CVE-2022-31565

The yogson/syrabond repository through 2020-05-25 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

SUSE SLES15 Security Update : kernel (Live Patch 25 for SLE 15) (SUSE-SU-2022:2220-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2220-1 advisory. - A flaw in Linux Kernel found in nfcmrvlnciunregisterdev in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when n...

CVE-2022-33037

creationtimestamp| type| source ---|---|--- 2022-06-29 17:23:25+00:00| seen| https://t.me/cibsecurity/45358...

Mozilla Firefox ESR < 91.11

The version of Firefox ESR installed on the remote Windows host is prior to 91.11. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-25 advisory. - The Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101 and Firefox ESR 91.10. Some of...

sv-hoern.de Cross Site Scripting vulnerability OBB-2678661

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cannalize.com.br Cross Site Scripting vulnerability OBB-2677388

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-33001

creationtimestamp| type| source ---|---|--- 2022-06-25 00:31:44+00:00| seen| https://t.me/cibsecurity/45142...

CVE-2022-34059

creationtimestamp| type| source ---|---|--- 2022-06-25 00:31:38+00:00| seen| https://t.me/cibsecurity/45138...

CVE-2022-34055

creationtimestamp| type| source ---|---|--- 2022-06-25 00:31:32+00:00| seen| https://t.me/cibsecurity/45135...

CVE-2022-30885

creationtimestamp| type| source ---|---|--- 2022-06-25 00:31:30+00:00| seen| https://t.me/cibsecurity/45133...

CVE-2022-34066

creationtimestamp| type| source ---|---|--- 2022-06-25 00:31:21+00:00| seen| https://t.me/cibsecurity/45127...

CVE-2022-34057

creationtimestamp| type| source ---|---|--- 2022-06-25 00:31:18+00:00| seen| https://t.me/cibsecurity/45124...

CVE-2022-23088

creationtimestamp| type| source ---|---|--- 2022-06-18 12:45:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6225 2022-06-18 16:05:43+00:00| published-proof-of-concept| https://t.me/cKure/9790 2024-10-12 06:49:41+00:00| seen| https://t.me/CyberSecurityTechnologies/632...

Denial Of Services

A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated Ethernet card and continued usage of this connection. This flaw allows a local user to crash the system...

Adobe Bridge Multiple Vulnerabilities (APSB22-25) - Mac OS X

The host is missing an important security update according to Adobe June update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Bridge 12.x < 12.0.2 Multiple Vulnerabilities (APSB22-25)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 12.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-25 advisory. - Adobe Bridge version 12.0.1 and earlier versions is affected by a Use-After-Free vulnerability that coul...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5471-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5471-1 advisory. It was discovered that the Linux kernel did not properly restrict access to the kernel debugger when booted in secure boot environments. A privileged...