19817 matches found
CVE-2022-33685
Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...
CVE-2022-33685
Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...
CVE-2022-1955
Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation...
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability
...
Druva code vulnerabilities
Druva is a large-scale SaaS platform from US-based Druva, Inc. bringing the simplicity, scalability and security of the public cloud to enterprise data protection and management. A security vulnerability exists in Druva version 6.9.0 in macOS, which stems from a vulnerability that allows an...
CVE-2022-22040: Undefined Security Weakness
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...
Samsung Mobile Devices security vulnerabilities
Samsung Wearable Manager is an application for Samsung Samsung mobile devices that connects wearable devices to mobile devices. Samsung Wearable Manager is vulnerable to an information disclosure vulnerability that stems from the installation of an unprotected dynamic receiver, which could be...
KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...
CVE-2022-33685
Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...
CVE-2022-33685: Dead Code
Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...
PT-2022-21800
Name of the Vulnerable Software and Affected Versions Wearable Manager Service versions prior to SMR Jul-2022 Release 1 Description The issue concerns an unprotected dynamic receiver in the Wearable Manager Service, allowing an attacker to launch arbitrary activities and access sensitive...
Vim regsub_both() Code Execution
The vulnerability of the vim regsubboth function in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Vim Normal C File Unauthorized Access
The vulnerability of the Vim text editor’s normal.c file lies in the overflow of the buffer in the dynamic memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Vim parse_cmd_address() Code Execution
The vulnerability of the parsecmdaddress function exdocmd.c in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Vim Code Execution
The vulnerability of the register.c file in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
org.dromara.dynamictp:dynamic-tp-example-nacos (>=1.2.1-beta, <=1.2.2), org.noear:nacos-solon-cloud-plugin (>=2.7.3, <=3.0.0-rc2) potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (1.4.7)
com.alibaba.nacos:nacos-client MAVEN version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - org.dromara.dynamictp:dynamic-tp-example-nacos =1.2.1-beta, =2.7.3, =3.0.0-rc2 Source cves:...
WWebView Component Privilege Escalation
The vulnerability of the categoryId parameter in the WWebView component of the MCE Systems lifecycle management system is related to errors in link processing before accessing a file, as well as deserialization of the PendingDynamicLinkData structure from the Intent Extra array with the key...
Fedora: Security Advisory for golang-k8s-kube-aggregator (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-33948
HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...
