Samsung Mobile Devices security vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung. A security vulnerability exists in the SAMSUNG Mobile devices SecDevicePickerDialog module, versions prior to SMR Aug-2022 Release 1, which is caused due to...

PT-2022-18025 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Garage Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Garage Management System, allowing for SQL injection through the manipulation of the userName/uemail...

WS-2022-0256

Due to Improper Access Control, bookwyrm is vulnerable to Insecure direct object references IDOR. This allows an attacker to create a group on other users' accounts, and affect the logic of the application. Version 0.4.5 contains a patch for this issue...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2022-35924 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2022-35924 Source advisory: OSV:GHSA-XV97-C62V-4587...

Path Traversal

org.dspace:dspace-jspui is vulnerable to path traversal. The vulnerability exists due to the resumable upload implementations in SubmissionController and FileUploadRequest components, which allows an attacker to modify request parameters during submission and create files or directories anywhere ...

PT-2022-33122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.289 Description A potential refcount leak was discovered in the tipc sk create function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-32822

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description A potential refcount leak issue exists in the tipc sk create function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32645

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32700

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.53 Description The issue is related to the movement of bc link creation back to tipc node create. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-32425

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32954

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-33052

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.253 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-33176

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.324 Description A potential issue exists in the tipc sk create function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

CVE-2022-2578

A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /phpaction/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit...

mariadb: server crash in create_tmp_table::finalize

A flaw was found in MariaDB. The component, Createtmptable::finalize, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

CVE-2022-36886: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

PT-2022-23701 · Veritas · Veritas Netbackup Opscenter

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup OpsCenter versions 8.x through 8.3.0.2 Veritas NetBackup OpsCenter versions 9.x through 9.0.0.1 Veritas NetBackup OpsCenter versions 9.1.x through 9.1.0.1 Veritas NetBackup OpsCenter version 10 Description: An authenticated...

MAL-2022-2230 Malicious code in create-ot-express-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269d815f0f72dcbee5d8320d8fdc6dfb67256e41db6c462544a0fb234cfbf97c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in create-ot-express-app

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...