3476 matches found
PT-2022-24706
Name of the Vulnerable Software and Affected Versions TRÅDFRI bulb affected versions not specified Description The issue arises when an attacker sends a single malformed IEEE 802.15.4 Zigbee frame, causing the TRÅDFRI bulb to blink. If the same frame is replayed multiple times, the bulb performs ...
CVE-2022-39861
Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to record video without camera privilege...
CVE-2022-39858
Path traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write arbitrary file as FactoryCamera privilege...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 3.5.51, which originates from an improper access control vulnerability in...
PT-2022-25048 · Unknown · Factorycamera
Name of the Vulnerable Software and Affected Versions: FactoryCamera versions prior to 3.5.51 Description: A path traversal issue exists in the AtBroadcastReceiver component of FactoryCamera, allowing attackers to write arbitrary files with FactoryCamera privileges. Recommendations: For versions...
SAMSUNG Mobile devices 路径遍历漏洞
SAMSUNG Mobile devices are a series of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A path traversal vulnerability exists in SAMSUNG Mobile devices version 3.5.51, which stems from a path traversal vulnerability in AtBroadcastReceiver in...
SUSE SLES15: libpmi0 / libslurm32 / perl-slurm / slurm / slurm-auth-none / etc (SUSE-SU-2022:3535-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3535-1 advisory. - CVE-2022-31251: Fixed a potential security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed architectural...
Rockwell Automation Factory Talk VantagePoint SQL注入漏洞
Rockwell Automation Factory Talk VantagePoint is an advanced industrial application ecosystem from Rockwell Automation, Inc. The SQL injection vulnerability in Rockwell Automation Factory Talk VantagePoint stems from a failure to properly validate SQL statements entered by users when retrieving...
Rockwell Automation Factory Talk VantagePoint 安全漏洞
Rockwell Automation Factory Talk VantagePoint is an advanced industrial application ecosystem from Rockwell Automation, Inc. An access control error vulnerability exists in Rockwell Automation Factory Talk VantagePoint, which stems from improper access control of its FactoryTalk VantagePoint...
SUSE SLES12: libpmi0 / libslurm31 / perl-slurm / slurm / slurm-auth-none / etc (SUSE-SU-2022:3497-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3497-1 advisory. - CVE-2022-31251: Fixed a potential security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed architectural fl...
SUSE SLES15: libnss_slurm2_20_02 / libpmi0_20_02 / libslurm35 / perl-slurm_20_02 / etc (SUSE-SU-2022:3491-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3491-1 advisory. - CVE-2022-31251: Fixed security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed architectural flaw that ca...
CVE-2022-41426
Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4AtomFactory::CreateAtomFromStream function in mp4split...
UBUNTU-CVE-2022-41426
Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4AtomFactory::CreateAtomFromStream function in mp4split...
Bento4 安全漏洞
Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a memory leak in the AP4AtomFactory::CreateAtomFromStream method of the mp4split component. An attacker could exploit the vulnerability to cause a...
SUSE SLES12: libnss_slurm2_20_02 / libpmi0_20_02 / libslurm35 / perl-slurm_20_02 / etc (SUSE-SU-2022:3477-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3477-1 advisory. - CVE-2022-31251: Fixed a potential security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed architectural fl...
Remote Code Execution (RCE)
redshift-jdbc42 is vulnerable to remote code execution. The vulnerability exists because the verifyPeerName function of MakeSSL.java does not properly check the class type when instantiating an object from a class name, allowing an attacker to inject and execute malicious code through the object...
SUSE SLES15: libpmi0_18_08 / libslurm33 / perl-slurm_18_08 / slurm_18_08 / etc (SUSE-SU-2022:3462-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3462-1 advisory. - CVE-2022-31251: Fixed a potential security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed an architectur...
SUSE SLES15: libpmi0 / libslurm33 / perl-slurm / slurm / slurm-auth-none / etc (SUSE-SU-2022:3468-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3468-1 advisory. - CVE-2022-31251: Fixed a potential security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed an architectur...
Design/Logic Flaw
In Amazon AWS Redshift JDBC Driver aka amazon-redshift-jdbc-driver or redshift-jdbc42 before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name...
