Vulnerability of the SNC_io parser function <EW>::read_edge(), eh->center_vertex() in the Nef_S2/SNC_io parser.h file, part of the Computational Geometry Algorithms library CGAL. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readedge and eh-centervertex in the NefS2/SNCio parser.h component is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Vulnerability of the SNC_io parser function <EW>: read_facet(), incident_volume(). Component: Nef_S2/SNC_io parser.h library, algorithm library for computational geometry CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readfacet and fh-incidentvolume in the NefS2/SNCio parser component’s NefS2/SNCio parser.h file is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->sfaces_begin(); component Nef_S2/SNC_io parser.h; algorithms library from the Computational Geometry Library CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: ::readvertex vh-sfacesbegin in the NefS2/SNCio parser.h file. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

PT-2022-35671 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to the drm/msm/dpu component, specifically with the indexing of dpu kms-hw vbif using vbif idx. The actual impact and attack plausibility have not yet been proven...

PT-2022-35537 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to the drm/msm/dpu component, specifically with the indexing of dpu kms-hw vbif using vbif idx. The actual impact and attack plausibility have not yet been proven...

Design/Logic Flaw

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk S2S or HTTP Event Collector HEC protocols to an indexer results in a blockage or denial-of-service preventing further indexing...

CVE-2022-43572 Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk S2S or HTTP Event Collector HEC protocols to an indexer results in a blockage or denial-of-service preventing further indexing...

CVE-2022-43572 Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk S2S or HTTP Event Collector HEC protocols to an indexer results in a blockage or denial-of-service preventing further indexing...

The vulnerability of the SQLite database management system’s API library allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the SQLite database management system’s API library is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code during the processing of a long sequence of formatted string data, processed b...

October 25, 2022—KB5018485 (OS Build 20348.1194) Preview

None None...

Altair HyperView Player 输入验证错误漏洞

Altair HyperView Player is a standalone 3D viewer from Altair Japan. It is used to share CAE models and simulation results. An input validation error vulnerability exists in Altair HyperView Player that originates from improper validation of an array indexing vulnerability that results in memory...

Zinc delete user function cross-site scripting vulnerability

Zinc is a full-text indexing search engine open sourced by Zinc Labs. Zinc v0.1.9 and later, v0.3.1 and earlier versions have a cross-site scripting vulnerability that could be exploited by attackers to obtain sensitive information such as user credentials...

The vulnerability of the WLAN microprogramming technology implementation in Qualcomm’s embedded chips allows a intruder to gain unauthorized access to protected information.

The vulnerability of the WLAN microprogramming software implementation in Qualcomm’s embedded chips relates to unvalidated array indexing during the processing of ANQP elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by sending...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents

Summary Multiple vulnerabilities in OpenSSL affect the IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents. These vulnerabilities include execution of arbitrary commands, weaker than expected security, and denial of service. Vulnerability Details CVEID:CVE-2022-1292 DESCRIPTION:...

Security Bulletin: Vulnerabilities in libcurl affect IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents

Summary Multiple vulnerabilities in libcurl affect the IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents. These vulnerabilities include obtaining sensitive information, man-in-the-middle attacks, denial of service, and bypassing of security restrictions. Vulnerability Details...

CVE-2022-2528

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages...

Design/Logic Flaw

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages...

CVE-2022-2528

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages...

CVE-2022-2528

CVE-2022-2528 affects Octopus Deploy. The issue allows uploading a package to the built-in feed with insufficient permissions after re-indexing packages. Per NVD, CVSS 3.1 base score 6.5 (Medium) with Network attack vector, low attack complexity, privileges required, no user interaction; impact i...

PT-2022-17185 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows uploading a package to the built-in feed with insufficient permissions after re-indexing packages. Recommendations: At the moment, there is no information about a...