EUVD-2022-32626

Malicious code in bioql PyPI...

DEBIAN-CVE-2022-49526

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: don't set sb values if can't pass sanity check If bitmap area contains invalid data, kernel will crash then mdadm triggers "Segmentation fault". This is cluster-md speical bug. In non-clustered env, mdadm will handle...

CVE-2023-28808

CVE-2023-28808 affects Hikvision Hybrid SAN/Cluster Storage products. A network-access vulnerability in the access control allows an attacker to obtain admin permissions by sending crafted messages to affected devices. The NVD metrics show a critical impact with CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/...

CVE-2023-28808: Improper Access Control

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices...

PT-2023-2441

Name of the Vulnerable Software and Affected Versions Hikvision Hybrid SAN/Cluster Storage products affected versions not specified Description The issue is related to access control errors in the software, allowing a remote attacker to exploit the vulnerability and gain administrator privileges...

CVE-2022-28171

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device...

CVE-2022-28172

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device...

CVE-2022-28171

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device...

Hikvision Hybrid SAN/Cluster Storage 命令注入漏洞

Hikvision Hybrid SAN/Cluster Storage Products is a line of cost-effective and reliable hybrid SAN Storage Area Network products from Hikvision, a China-based company. A security vulnerability exists in Hikvision Hybrid SAN/Cluster Storage that stems from insufficient input validation in the web...

CVE-2022-28171: Improper Neutralization of Special Elements used in an OS Command

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device...

CVE-2022-28172: Improper Neutralization of Input During Web Page Generation

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device...

Tendrl API Session Hijacking Vulnerability

The Tendrl APIs are a set of APIs that provide installation, storage configuration, lifecycle management, monitoring and alerting capabilities for Ceph and Cluster storage. A session hijacking vulnerability exists in the Tendrl API. An attacker could exploit this vulnerability to gain access to...