Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files...

Design/Logic Flaw

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

CVE-2022-46314

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-46315

The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-46315

The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

Design/Logic Flaw

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

Design/Logic Flaw

The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

Design/Logic Flaw

An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image...

design-process.co.jp Cross Site Scripting vulnerability OBB-3109346

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Design/Logic Flaw

Apiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. The root cause of the issue is the Apiman project's accidental acceptance of a large contribution that was not fully compatible with the security model of Apiman versions before...

CVE-2022-46315

The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-46314

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-46314

Technical details about CVE-2022-46314 are not publicly available in the provided documents. Available references reiterate a design flaw in the IPC module with potential availability impact; monitor for updates.

CVE-2022-46315

The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-46314

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

PT-2022-27807 · Unknown · Profilesdk

Name of the Vulnerable Software and Affected Versions: ProfileSDK affected versions not specified Description: The issue is related to defects introduced in the design process of the ProfileSDK. Successful exploitation may affect system availability. Recommendations: At the moment, there is no...

CVE-2022-46315

Technical details about CVE-2022-46315 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or fixes are detailed here. Monitor for updates from vendors and security bulletins.

Design/Logic Flaw

IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740...

Design/Logic Flaw

DISPUTED A vulnerability was found in whohas. It has been rated as problematic. This issue affects some unknown processing of the component Package Information Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be initiated remotely. The real...

Design/Logic Flaw

An unprotected memory-access operation in opteeos in TrustedFirmware Open Portable Trusted Execution Environment OP-TEE before 3.20 allows a physically proximate adversary to bypass signature verification and install malicious trusted applications via electromagnetic fault injections...