28 matches found
SUSE CVE-2022-30187
unknown...
CVE-2022-30187
creationtimestamp| type| source ---|---|--- 2022-07-13 02:25:48+00:00| seen| https://t.me/cibsecurity/46123 2022-07-18 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2022/07/mitigation-for-azure-storage-sdk-client-side-encryption-padding-oracle-vulnerability/...
CVE-2022-30187
Azure Storage Library Information Disclosure Vulnerability...
CVE-2022-30187
CVE-2022-30187 concerns the Microsoft Azure Storage Library (client-side encryption) where a padding-oracle/information-disclosure issue could allow a local, authenticated attacker to bypass confidentiality restrictions. Public references describe it as an Authorization/Confidentiality impact in ...
KLA12585 OSI vulnerability in Microsoft Dynamics
An information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2022-30187 Related products Microsoft-Azure CVE list CVE-2022-30187 warning KB list Solution Install necessary updates...
CODESYS Control V2 Linux SysFile library
1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS, GmbH Equipment: CODESYS V2 Runtime Toolkit Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability may allow the control programmer to call...
CVE-2021-30187
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...
CVE-2021-30187
Summary: CVE-2021-30187 affects the CODESYS V2 Runtime System SPs prior to 2.4.7.55, enabling an OS command injection via the SysFile library. Affected product/component: CODESYS Control/Runtime Toolkit 32‑bit full SP before 2.4.7.55 (CODESYS V2 Runtime System). Root cause: Improper neutralizatio...