Security Bulletin: The IBM Data Studio Help System may display debug information if an input parameter is out of range.

Abstract IBM Data Studio version 3.1.1 and 3.2 include Eclipse 3.6 components that provide functionality to display the help. These components have a potential vulnerability where debug information may be displayed if an input parameter is out of range. Content VULNERABILITY DETAILS: CVE ID:...

CVE-2022-40866

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/...

Security Bulletin: IBM Maximo Asset Management contains a misconfiguration that could allow an authenticated user to view backup and debug application files which could contain sensitive information (CVE-2015-4965)

Summary IBM Maximo Asset Management configuration allows an authenticated user to view backup and debug application files. This vulnerability could allow a local attacker to obtain sensitive information. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo...

PT-2024-8452 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free error in the kobject del function, which can be caused by a double free of kmem cache. This error occurs when the slub debug test is run with t...

PT-2022-33766 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A potential buffer overflow issue exists due to the use of snprintf in the ASoC: SOF: debug component. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-33955 · Linux · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM versions prior to v5.15.61 Linux Kernel versions prior to v5.15.61 Description: The issue concerns a snapshot pre-VM-Enter DEBUGCTL for the !nested run pending case in KVM's nVMX. The actual impact and attack plausibility have not yet bee...

PT-2022-33474 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the removal of a UUID from the s390 debug log in the vfio/ccw component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-24412 · Cms8000 · Cms8000

Name of the Vulnerable Software and Affected Versions: CMS8000 device affected versions not specified Description: The issue concerns the compilation settings of multiple binary application files on the CMS8000 device. These files are compiled with 'not stripped' and 'debug info' settings, which...

PT-2022-5069 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 7.4.2j Description: The issue is related to the storage of critical informatio...

CVE-2022-28170. Brocade Fabric OS Web Application services store server and user passwords in the debug statements.

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file. Affected Product All Brocade Fabric OS versions...

CVE-2022-28170. Brocade Fabric OS Web Application services store server and user passwords in the debug statements.

Security Advisory ID : BSA-2022-2076 Component : FOS Revision : 1.1 Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file...

CVE-2022-36601

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands...

CVE-2022-36601

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands...

CVE-2022-36601

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands...

Command injection

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands...

CVE-2022-36601

The CVE-2022-36601 issue affects JasMiner-X4-Server versions 20220621-090907 and earlier. The Eclipse TCF debug interface is open on port 1534, allowing unauthenticated attackers to gain root privileges and access sensitive data or execute arbitrary commands. There is no publicly disclosed exploi...

Contec Health CMS8000 Patient Monitor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Low attack complexity Vendor: Contec Health Equipment: CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor Vulnerabilities: Improper Access Control, Uncontrolled Resource Consumption, Use of Hard-Coded Credentials, Active Debug Code 2. RISK EVALUATION...

PT-2022-23497 · Eclipse · Eclipse Tcf

Name of the Vulnerable Software and Affected Versions: JasMiner-X4-Server versions 20220621-090907 and below Description: The Eclipse TCF debug interface is open on port 1534, allowing unauthenticated attackers to gain root privileges on the affected device, access sensitive data, or execute...

PT-2022-24221 · Gnu · Binutils

Name of the Vulnerable Software and Affected Versions: binutils affected versions not specified Description: The issue is related to an infinite loop that may be triggered in the display debug abbrev function in binutils/dwarf.c when opening a crafted ELF file. This could lead to a denial of...

GHSA-WMQQ-R32M-87C5 python-oslo-utils has improper password parsing

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...