9434 matches found
CVE-2022-35946 SQL injection through plugin controller in GLPI
GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In affected versions request input is not properly validated in the plugin controller and can be used ...
EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-2292)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition in the Linux kernel before 5.5.7 involving VTRESIZEX could lead to a NULL pointer dereference and general protection fault...
CVE-2022-20388
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323...
6 patch management best practices for businesses
Patching is a thorn in the side of many businesses today: Everything from keeping up with the volume of patches to prioritizing what needs to be patched first can cause major delays in a business's patching process. Needless to say, businesses are looking to streamline their patch management...
CVE-2022-36875
creationtimestamp| type| source ---|---|--- 2022-09-09 18:29:40+00:00| seen| https://t.me/cibsecurity/49520...
CVE-2022-36877
Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log...
CVE-2022-36877
Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log...
CVE-2022-36877
Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log...
CVE-2022-36866
Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...
CVE-2022-36866
Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...
Information disclosure
Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log...
CVE-2022-36877
Samsung Members before 4.3.00.11 (Global) and before 14.0.02.4 (China) expose sensitive information in FaqSymptomCardViewModel via logs, enabling local attackers to access device identification. The issue is confirmed across multiple sources (including PT-2022-23681) with a local attack vector an...
CVE-2022-36877
Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log...
USING SYMBOL FOR TOKEN IDENTIFICATION
Lines of code Vulnerability details Impact Proof of Concept An exploiter may create a fake tokens whose symbols are cNOTE, cUSDT or cUSDC. When somebody call computrolle’s liquidateCalculateSeizeTokens ，it will give an unlisted token with other token's it can be unlisted token or listed token...
USE SAME SYMBOL CAN GET FAKED PRICE OF TOKEN
Lines of code Vulnerability details Impact it compare symbol to identify token，it can be exploit to produce fake price of token. Proof of Concept attacker can create a token which is like cToken and has symbol of cNOTE .When somebody call comptroller’s liquidateCalculateSeizeTokens ，it will give ...
CVE-2022-22101
creationtimestamp| type| source ---|---|--- 2022-09-02 16:39:15+00:00| seen| https://t.me/cibsecurity/49228...
CVE-2022-36055 Denial of service in Helm
Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...
CVE-2022-35742
creationtimestamp| type| source ---|---|--- 2022-08-29 20:46:30+00:00| published-proof-of-concept| https://t.me/avleonovrus/79 2022-09-16 11:00:33+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6810 2023-09-21 09:22:26+00:00| seen| https://t.me/avleonovrus/67...