1189 matches found
Design/Logic Flaw
KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message can crash CloudCore by triggering a nil-pointer dereference in the UDS Server. Since the UDS Server only communicates...
CVE-2022-31077
KubeEdge CSI Driver vulnerability (CVE-2022-31077): A malicious response from KubeEdge can trigger a nil-pointer dereference in the CSI Driver controller, causing denial of service. Affected are KubeEdge releases prior to 1.11.0, 1.10.1, and 1.9.3. The flaw arises from a crash of the CSI Driver c...
CVE-2022-31076
KubeEdge vulnerability CVE-2022-31076 affects CloudCore’s UDS Server. A crafted message can trigger a nil-pointer dereference when the unixsocket switch is enabled in cloudcore.yaml, crashing CloudCore. Impact is local to the host network and assumes the attacker is an authenticated Cloud user; e...
PT-2022-20512 · Kubeedge · Kubeedge
Name of the Vulnerable Software and Affected Versions: KubeEdge versions prior to 1.11.0 KubeEdge versions prior to 1.10.1 KubeEdge versions prior to 1.9.3 Description: A malicious message response from KubeEdge can crash the CSI Driver controller server by triggering a nil-pointer dereference...
The vulnerability of software for managing Intel In-Band devices allows a perpetrator to enhance their privileges and gain unauthorized access to the application.
The vulnerability of software for managing Intel In-Band devices is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to the application...
The vulnerability of software for managing Intel In-Band devices allows a perpetrator to bypass authentication processes and gain increased privileges.
The vulnerability of software for managing Intel In-Band devices is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain increased privileges...
CVE-2022-30189
Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability...
CVE-2022-30189
Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability...
CVE-2022-30189
Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability...
Spoofing
Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability...
CVE-2022-30189 Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability
...
CVE-2022-30189
CVE-2022-30189 is a Windows Autopilot Device Management and Enrollment Client spoofing vulnerability. Connected sources describe this as a spoofing flaw that could allow an attacker to masquerade as another user via the Autopilot client, with remote exploitation potential. Public mappings in the ...
CVE-2022-30903
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
CVE-2022-30903
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
CVE-2022-30903
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
Cross site scripting
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
CVE-2022-30903
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
CVE-2022-30903
CVE-2022-30903 affects Nokia G-2425G-A Bharti Airtel routers (hardware 3FE48299DEAA, software 3FE49362IJHK42). The vulnerability is a Cross-Site Scripting (XSS) flaw accessible via the admin UI path admin → Maintenance → Device Management. The provided sources describe the issue but do not supply...
Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability
...
PT-2022-2937 · Microsoft · Windows Autopilot +1
Name of the Vulnerable Software and Affected Versions: Windows Autopilot versions affected versions not specified Description: The issue is related to a spoofing vulnerability in the Windows Autopilot Device Management and Enrollment Client. This vulnerability is associated with errors in the...