Lucene search
K

8 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-22934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion's public key, which ca...

8.8CVSS6.9AI score0.00861EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/06/04 12:45 p.m.4 views

SUSE CVE-2022-22934

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion's public key, which can result in attackers substituting arbitrary pillar data...

7.5CVSS7.9AI score0.00861EPSS
Exploits0References43
Positive Technologies
Positive Technologies
added 2024/02/13 12:0 a.m.4 views

PT-2024-1956 · Microsoft · Windows Printing Service +1

Name of the Vulnerable Software and Affected Versions: Windows Printing Service affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Windows printing service. Exploitation of this issue may allow a remote...

7.8CVSS9.2AI score0.00856EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2023/01/25 12:0 a.m.5 views

The vulnerability in the implementation of the full-screen warning message function in Mozilla Firefox allows a hacker to perform a spoofing attack.

The vulnerability of the full-screen warning message implementation in Mozilla Firefox relates to the possibility that the full-screen notification may be delayed or suppressed, which could lead to data substitution. Exploiting this vulnerability allows a remote attacker to redirect users to a...

5CVSS7AI score0.00892EPSS
Exploits0References13Affected Software6
ATTACKERKB
ATTACKERKB
added 2022/03/29 5:15 p.m.5 views

CVE-2022-22934

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data...

8.8CVSS7AI score0.00861EPSS
Exploits0References7
PyPA
PyPA
added 2022/03/29 5:15 p.m.4 views

PYSEC-2022-171

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data...

8.8CVSS7.1AI score0.00861EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2022/03/29 12:0 a.m.187 views

CVE-2022-22934

The CVE-2022-22934 issue affects SaltStack Salt versions before 3002.8, 3003.4, or 3004.1, where Salt Masters do not sign pillar data with the minion’s public key, enabling an attacker to substitute arbitrary pillar data. Connected advisories corroborate multiple vulnerability entries for Salt in...

8.8CVSS8.4AI score0.00861EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.2 views

PT-2022-1525 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the Windows Certificate authentication procedure, allowing an attacker to conduct spoofing attacks. It is associated with data substitution, enabling...

7.8CVSS9.4AI score0.00704EPSS
Exploits0References14
Rows per page
Query Builder