PT-2022-23644 · Samsung · Samsung Update Setup

Name of the Vulnerable Software and Affected Versions: Samsung Update Setup versions prior to 2.2.9.50 Description: The issue allows attackers to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 2.2.9.50, update to version 2.2.9.50 or later to...

CVE-2022-33726: Dead Code

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

PT-2022-21843

Name of the Vulnerable Software and Affected Versions Samsung Galaxy Friends versions prior to SMR Aug-2022 Release 1 Description The issue concerns an unprotected dynamic receiver, allowing an attacker to launch an activity. Recommendations For versions prior to SMR Aug-2022 Release 1, update to...

Samsung Mobile Devices security vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Galaxy Friends versions prior to SMR Aug-2022 Release 1, which arises from an unprotecte...

NVIDIA graphics driver security vulnerabilities

NVIDIA graphics driver is a graphics driver from NVIDIA Corporation. A security vulnerability exists in the NVIDIA graphics driver that originates from the Dynamic Boost D-Bus component not properly restricting access to its endpoints, which can be exploited by an attacker to cause a denial of...

USN-5547-1 nvidia-graphics-drivers-390, nvidia-graphics-drivers-450-server, nvidia-graphics-drivers-470, nvidia-graphics-drivers-470-server, nvidia-graphics-drivers-510, nvidia-graphics-drivers-510-server, nvidia-graphics-drivers-515, nvidia-graphics-drivers-515-server vulnerabilities

Le Wu discovered that the NVIDIA graphics drivers did not properly perform input validation in some situations. A local user could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-31607 Tal Lossos discovered that the NVIDIA graphics drivers incorrectly handled...

Cisco IOS DHCP Option 82 Reboot DoS

The vulnerability of DHCP option 82 for Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure using a specially crafted DHCPv4 packet...

Cisco IOS DHCP Option 82 Reboot DoS

The vulnerability of DHCP option 82 for Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure using a specially crafted DHCPv4 packet...

GSD-2022-1004829 afs: Fix dynamic root getattr

afs: Fix dynamic root getattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.250 by commit 65c24caf1b9f5b08397c6e805ec24ebc390c6e4d, it w...

GSD-2022-1004628 afs: Fix dynamic root getattr

afs: Fix dynamic root getattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit 7b564e3254b7db5fbfbf11a824627a6c31b932b4, it w...

GSD-2022-1004466 afs: Fix dynamic root getattr

afs: Fix dynamic root getattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit 2b2bba96526f25f2eba74ecadb031de2e05a83ce, it wa...

[SECURITY] Fedora 36 Update: golang-starlark-0-0.8.20210113gite81fc95.fc36

Starlark is a dialect of Python intended for use as a configuration language. Like Python, it is an untyped dynamic language with high-level data types, first-class functions with lexical scope, and garbage collection. Unlike CPython, independent Starlark threads execute in parallel, so Starlark...

PT-2022-33091

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.19.245 through v4.19.249 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically with dynamic root getattr. The actual impact and attack plausibility have not yet been...

PT-2022-33005

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4.196 through v5.4.201 Description The issue is related to a dynamic root getattr in the afs component. It was introduced in version v5.4.196 and fixed in version v5.4.202. The actual impact and attack plausibility hav...

Fedora: Security Advisory for golang-k8s-kube-aggregator (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-k8s-kube-aggregator-1.22.0-5.fc36

Aggregator for Kubernetes-style API servers: dynamic registration, discovery summarization, secure proxy...

JSON Schema Code Execution

The vulnerability of the JSON Schema-based application for checking and testing JSON files is related to insufficient control over the modification of dynamically defined object properties during JSON file processing. Exploiting this vulnerability could allow a malicious actor, operating remotely...

GHSA-JVVX-HMMR-RHGG Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-36902

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...