Design/Logic Flaw

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

UBUNTU-CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

CVE-2022-45062: Improper Neutralization of Argument Delimiters in a Command

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

PT-2022-27396 · Xfce +3 · Xfce4-Mime-Helper +4

Name of the Vulnerable Software and Affected Versions: xfce4-settings versions 4.16.3 and earlier, 4.17.x before 4.17.1 Description: There is an argument injection issue in the xfce4-mime-helper from the xfce4-settings package. This issue allows for argument injection, which can potentially be...

easyii CMS 代码问题漏洞

easyii CMS is a simple CMS for simple websites. easyii CMS has a security vulnerability that stems from a compromised function file in the helpers/Upload.php file of the component File Upload Management, which could lead to unrestricted uploads. No details of the vulnerability are currently...

Redis Labs Redis 代码问题漏洞

Redis Labs Redis is an open source, network-enabled, memory-based, persistent logging, key-value Key-Value storage database written in ANSI C from Redis Labs, Inc. and provides APIs in multiple languages. Redis Labs Redis is vulnerable to a code issue that originates from unknown code in C:/Progr...

Dnsmasq create_helper() DoS

The vulnerability of the createhelper function in the /src/helper.c component of the DNS server Dnsmasq is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created DHCP response...

USN-5666-1 openssh vulnerability

It was discovered that OpenSSH incorrectly handled certain helper programs. An attacker could possibly use this issue to arbitrary code execution...

USN-5666-1: OpenSSH vulnerability

It was discovered that OpenSSH incorrectly handled certain helper programs. An attacker could possibly use this issue to arbitrary code execution...

CVE-2022-39864

Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive information via implicit intent...

SQL Injection

moodle/moodle is vulnerable to sql injection attacks. The vulnerability exists in getuserslisting function of datalib.php due to improper implementation of sort helper and column mapping for sort which allows an attacker to inject malicious queries into the system...

cups-pk-helper-mechanism Memory Exhaustion

The vulnerability of the cups-pk-helper-mechanism utility in the “EMIAS” operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service failures or other effects due to insufficient memory resources...

GSD-2022-1006292 ALSA: timer: Use deferred fasync helper

ALSA: timer: Use deferred fasync helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

PT-2022-34385

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue concerns an overflow check in the register shm helper function. It was introduced in version v4.16 and is fixed in Linux Kernel version v4.19.256. The actual impact and attack...

PT-2022-34550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.326 Description The issue concerns the ALSA timer and its use of a deferred fasync helper. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions prior...

PT-2022-34351

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue concerns the ALSA timer and its use of a deferred fasync helper. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions prio...

PT-2022-34463

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description The issue is related to the ALSA timer and the use of a deferred fasync helper. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...