4616 matches found
CVE-2022-46174
CVE-2022-46174 affects the Amazon EFS utilities (efs-utils) with a race condition in the EFS mount helper when TLS is used. In v1.34.3 and earlier, concurrent TLS-enabled mounts can allocate the same local port for stunnel/NFS, causing failed mounts or incorrect mapping of a customer’s local moun...
CVE-2022-46174: Concurrent Execution using Shared Resource with Improper Synchronization
efs-utils is a set of Utilities for Amazon Elastic File System EFS. A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helper allocates a local port for stunnel to receive NFS...
PT-2022-27788
Name of the Vulnerable Software and Affected Versions efs-utils versions v1.34.3 and below aws-efs-csi-driver versions v1.4.7 and below Description A potential race condition issue exists within the Amazon EFS mount helper in affected versions. When using TLS to mount file systems, the mount help...
aiobook (0.1.0), carml (18.4.0) +5 more potentially affected by CVE-2022-40897 via setuptools (40.6.2)
setuptools PYPI version 40.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aiobook 0.1.0 - carml 18.4.0 - chaostoolkit 1.0.0rc1 - chaostoolkit-lib 1.0.0rc1 - commit-helper 3.4.13 - commit-helper-testing 3.4.8 -...
Updated xfce4-settings packages fix security vulnerability
argument injection vulnerability in xfce4-mime-helper from the xfce4-settings package...
CVE-2022-23520 rails-html-sanitizer contains an incomplete fix for an XSS vulnerability
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, there is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer due to an incomplete fix of CVE-2022-32209. Rails::Html::Sanitizer may allow an attacker to...
Possible XSS vulnerability with certain configurations of rails-html-sanitizer
Summary There is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. - Versions affected: ALL - Not affected: NONE - Fixed versions: 1.4.4 Impact A possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject...
CVE-2022-20611
In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PT-2022-14693 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a confused deputy in the ResetTargetTaskHelper.java test, which could allow the hijacking of any app that sets allowTaskReparenting to true. This could lead t...
CVE-2022-39894
Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent...
GSD-2022-1007814 KVM: Initialize gfn_to_pfn_cache locks in dedicated helper
KVM: Initialize gfntopfncache locks in dedicated helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...
PT-2022-25087 · Unknown · Contactliststartactivityhelper
Name of the Vulnerable Software and Affected Versions: Phone versions prior to SMR Dec-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the ContactListStartActivityHelper. This vulnerability allows access to sensitive information via an implicit...
How to use Linked Helper 2 as a LinkedIn Data Export Tool
By Owais Sultan One of the best things about LinkedIn is that it allows you to download a CSV file with… This is a post from HackRead.com Read the original post: How to use Linked Helper 2 as a LinkedIn Data Export Tool...
OESA-2022-2105 xfce4-settings security update
This package includes the settings manager applications for the Xfce desktop. Security Fixes: In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.CVE-2022-45062...
adversarial-robustness-toolbox (1.2.0), aristote-malo (1.9.5) +79 more potentially affected by CVE-2022-45198 via pillow (7.0.0)
pillow PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-robustness-toolbox 1.2.0 - aristote-malo 1.9.5 - auto-annotate =1.0.0, =1.0.2, =0.1.0.dev31, =1.0.1, =0.2.3, =0.0.1.25, =0.2.1, =0.0.2,...
PT-2022-35366
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description The issue concerns the removal of unused and incorrect debugfs usage in the audio helper of greybus. The actual impact and potential for attack have not been proven yet. Recommendations For...
PT-2022-35129
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.3 Description The issue concerns the removal of unused and incorrect debugfs usage in the audio helper of greybus. The actual impact and potential for attack have not been proven yet. Recommendations For Lin...
PT-2022-35556
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description The issue concerns the removal of unused and incorrect debugfs usage in the audio helper of greybus. The actual impact and potential for attack have not been proven yet. Recommendations For...
