SUSE: Security Advisory (SUSE-SU-2022:0826-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tenda AX12 Stack Overflow Vulnerability

Tenda Ax12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.The Tenda AX12 has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via list parameters...

Tenda AX12 Buffer Overflow Vulnerability

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A security vulnerability exists in Tenda AX12 v22.03.01.21, which originates from a stack buffer overflow contained in the function sub422CE4. An attacker can exploit this vulnerability to cause a denial of service DoS via...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-21179)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A security vulnerability exists in Tenda Ax3 v16.03.12.10CN, which originates from a stack overflow in the function fromSetSysTime. An attacker can exploit this vulnerability to cause a Denial of Service DoS v...

GHSA-952P-FQCP-G8PC HTML injection possibility in voucher code form in Shopware

Impact HTML injection possibility in voucher code form Patches Patched in 6.4.8.1, maintainers recommend updating to the current version 6.4.8.2. You can get the update to 6.4.8.2 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6...

SUSE: Security Advisory (SUSE-SU-2022:0779-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Initialization in Linux Linux_Kernel

Information c Exploit Title: Local Privilege Escalation...

RHEL 6 : cyrus-sasl (RHSA-2022:0780)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0780 advisory. The cyrus-sasl packages contain the Cyrus implementation of Simple Authentication and Security Layer SASL. SASL is a method for adding authentication...

SUSE: Security Advisory (SUSE-SU-2022:0768-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:0722-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Elasticsearch privilege escalation

A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “” index permissions access to this index. Users running a cluster on an affected version...

SUSE: Security Advisory (SUSE-SU-2022:0676-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-25634

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory...

PT-2022-6843

Name of the Vulnerable Software and Affected Versions Qt versions 5.15.8 and earlier Qt versions 6.x through 6.2.3 Description The issue is related to the LoadLibrary function in the Qt cross-platform framework, which can be exploited to bypass directory restrictions. This could allow a remote...

OPENSUSE-SU-2022:0054-1 Security update for sphinx

This update for sphinx fixes the following issues: - CVE-2020-29050: SphinxSearch in Sphinx Technologies Sphinx allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc...

CVE-2021-45079 affecting package strongswan 5.7.2-6

CVE-2021-45079 affecting package strongswan 5.7.2-6. A patched version of the package is available...

SUSE: Security Advisory (SUSE-SU-2022:0563-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Potential spoofing attack in WebSphere Application Server affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2018-1695)

Summary There is a potential spoofing attack in WebSphere Application Server using Form Login when using Java SE 6 which affects IBM Spectrum Control formerly Tivoli Storage Productivity Center. This does not occur when using other versions of the Java SE. Vulnerability Details CVEID: CVE-2018-16...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13938)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the security and security5g parameters...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13935)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the wpapskcrypto parameter...