GSD-2022-1001225 drm/msm/dp: populate connector of struct dp_panel

drm/msm/dp: populate connector of struct dppanel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

Aiven Ltd: [Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal Jolokia

Summary: The Aiven JDBC sink includes the SQLite JDBC Driver. This JDBC driver can be used to upload SQLite database files onto the server. The HTTP sink connector allows sending HTTP requests to localhost. There is unprotected Jolokia listening on localhost:6725. JMX exports the...

Oracle MySQL Buffer Overflow Vulnerability (CNVD-2022-31690)

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Server is one of the database server components.MySQL Connectors is one of the drivers for connecting applications that use MySQL. Oracle MySQL suffers from a buffer overflow vulnerability that allo...

SUSE SLES12 Security Update : mysql-connector-java (SUSE-SU-2022:1142-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:1142-1 advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and...

Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServers that use the Box connector may be vulnerable to arbitrary code execution due to CVE-2021-23555

Summary Node.js module vm2 is used by IBM App Connect Enterprise Certified Container by the Box connector in a Designer flow. IBM App Connect Enterprise Certified Container IntegrationServers that use the Box connector may be vulnerable to CVE-2021-23555. This bulletin provides patch information ...

SUSE-SU-2022:1142-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - CVE-2021-2471: Fixed unauthorized access to critical data or complete access to all MySQL Connectors bsc1195557...

The vulnerability of the Connector/J driver for MySQL Connectors in the MySQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the Connector/J driver for MySQL Connectors in the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2021-43421

A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via connector.minimal.php, which allows a remote malicious user to upload arbitrary files and execute PHP code...

Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path

Exploit Title: Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path Exploit Author: Manthan Chhabra netsectuna, Harshit fumenoid Version: 2020.2.20328.2050 Date: 02/04/2022 Vendor Homepage: http://gimmal.com/ Vulnerability Type: Unquoted Service Path Tested on: Windows 10 CVE:...

Sherpa Connector Service 2020.2.20328.2050 Unquoted Service Path Vulnerability

Exploit Title: Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path Exploit Author: Manthan Chhabra netsectuna, Harshit fumenoid Version: 2020.2.20328.2050 Vendor Homepage: http://gimmal.com/ Vulnerability Type: Unquoted Service Path Tested on: Windows 10 CVE: CVE-2022-23909 Step t...

CVE-2022-23909

There is an unquoted service path in Sherpa Connector Service SherpaConnectorService.exe 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file...

CVE-2022-23909

There is an unquoted service path in Sherpa Connector Service SherpaConnectorService.exe 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file...

CVE-2022-23909

There is an unquoted service path in Sherpa Connector Service SherpaConnectorService.exe 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file...

Design/Logic Flaw

There is an unquoted service path in Sherpa Connector Service SherpaConnectorService.exe 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file...

CVE-2022-23909

The CVE-2022-23909 entry concerns an unquoted service path in the Sherpa Connector Service (SherpaConnectorService.exe, version 2020.2.20328.2050). Multiple sources (NVD, Red Hat, CVE listings, ExploitDB) describe a local privilege escalation where a local attacker could create the file C:\Progra...

CVE-2022-23909

There is an unquoted service path in Sherpa Connector Service SherpaConnectorService.exe 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file...

Gimmal Sherpa Connector Service 代码问题漏洞

Gimmal Sherpa Connector Service is a connector service from Gimmal USA. A security vulnerability exists in Sherpa Connector Service version 2020.2.20328.2050, which originates from an unreferenced service path. A local attacker can exploit the vulnerability to escalate privileges by creating the...

CVE-2022-0403

The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues CVE-2021-32682, and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users,...

Sherpa Connector Service 2020.2.20328.2050 Unquoted Service Path

Exploit Title: Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path Exploit Author: Manthan Chhabra netsectuna, Harshit fumenoid Version: 2020.2.20328.2050 Date: 02/04/2022 Vendor Homepage: http://gimmal.com/ Vulnerability Type: Unquoted Service Path Tested on: Windows 10 CVE:...

IBM Rational ClearCase GIT connector trust management issue vulnerability

IBM Rational ClearCase is a software configuration management solution from IBM Corporation. The solution provides version control, workspace management, parallel development support, and build auditing.A trust management issue vulnerability exists in IBM Rational ClearCase GIT connector version...