5067 matches found
CVE-2022-29692: Use After Free
Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function...
PT-2022-19785
Name of the Vulnerable Software and Affected Versions Unicorn Engine version 1.0.3 Description A use-after-free issue was found in the hook function of the Unicorn Engine. Recommendations For Unicorn Engine version 1.0.3, consider disabling the hook function as a temporary workaround until a patc...
CVE-2022-31258
In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink...
Code injection
In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink...
CVE-2022-31258
In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink...
Checkmk 后置链接漏洞
Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by an attacker to upgrade to root by editing an OMD hook link.The following products and versions are affected: versions prior to 1.6.0p29, 2.x versions prior to 2.0.0p25, and 2.1.x versions prior to 2.1.0b10...
PT-2022-20645 · Checkmk · Checkmk
Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 1.6.0p29 Checkmk versions 2.x prior to 2.0.0p25 Checkmk versions 2.1.x prior to 2.1.0b10 Description: A site user can escalate to root by editing an OMD hook symlink. Recommendations: For Checkmk versions prior to...
CVE-2022-31258: Improper Link Resolution Before File Access
In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink...
GHSA-7P4P-V6HR-GP3M Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text
A exposure of sensitive information vulnerability exists in Jenkins Gitlab Hook Plugin 1.4.2 and older in gitlabnotifier.rb, views/gitlabnotifier/global.erb that allows attackers with local Jenkins master file system access or control of a Jenkins administrator's web browser e.g. malicious...
container-tools:rhel8 bug fix update
An update is available for fuse-overlayfs, container-selinux, udica, containers-common, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, python-podman, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common...
container-tools:3.0 security and bug fix update
An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...
container-tools:3.0 security and bug fix update
An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...
CVE-2022-24070
A use-after-free vulnerability was found in Subversion in the moddavsvn Apache HTTP server HTTPd module. While looking up path-based authorization authz rules, multiple calls to the postconfig hook can invalidate cached pointers to object-pools, which Subversion subsequently uses. This issue...
sandyhookpromise.org Cross Site Scripting vulnerability OBB-2455422
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-36900
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported, with the crash state involving epassNUMBER hook path, epassNUMBER hook file, and epassNUMBER create...
PT-2022-29047
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description The issue is related to a use-after-free in the nf register net hook function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-7479
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.1 Description A critical vulnerability in the Linux kernel has been resolved, affecting versions prior to 5.17.1. The vulnerability is related to a use-after-free issue in the nf register net hook function,...
PT-2022-36844
Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A heap-buffer-overflow WRITE 4 crash has been reported. The crash involves the row mt worker hook and thread loop functions. No information is available about the estimated number of...
PT-2022-37690
Уязвимость функции parsec hook setxattr модуля ядра linux-astra-modules связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
container-tools:rhel8 security, bug fix, and enhancement update
An update is available for fuse-overlayfs, container-selinux, udica, containers-common, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, python-podman, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common...