Cargo 数据伪造问题漏洞

Cargo is a Rust package manager open-sourced by The Rust Programming Language. A data forgery issue vulnerability exists in versions of Cargo prior to 0.67.1, which stems from a failure to perform SSH host key authentication when cloning indexes and dependencies over SSH, which can be exploited b...

CVE-2022-46176

Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. An attacker could exploit this to perform man-in-the-middle MITM attacks. This vulnerability has been assigned...

PT-2023-1358

Name of the Vulnerable Software and Affected Versions Rust versions prior to 1.66.1 Description The issue is related to the Cargo package manager in Rust, which does not perform SSH host key verification when cloning indexes and dependencies via SSH. This allows an attacker to perform...

Huawei EulerOS: Security Advisory for postgresql (EulerOS-SA-2023-1081)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.6 : postgresql (EulerOS-SA-2023-1081)

According to the versions of the postgresql package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24...

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to man-in-the-middle due to moment vulnerability [X-Force ID 238619]

Summary Automation Assets in IBM Cloud Pak for Integration is vulnerable to man-in-the-middle due to moment vulnerability X-Force ID 238619 with details below. This has been addressed. Vulnerability Details IBM X-Force ID: 238619 DESCRIPTION: Moment Moment-Timezone is vulnerable to a...

CVE-2022-47633

An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry or a man-in-the-middle attacker to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations a...

Fedora 36 : nheko (2022-1fd94a54a1)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-1fd94a54a1 advisory. Updated to version 0.10.2 with CVE fix. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

CVE-2022-35646

IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using man-in-the-middle techniques. IBM X-Force ID: 231096...

Information disclosure

IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using man-in-the-middle techniques. IBM X-Force ID: 231096...

CVE-2022-35646 IBM Security Verify Governance, Identity Manager security bypass

IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using man-in-the-middle techniques. IBM X-Force ID: 231096...

PT-2022-7107 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance, Identity Manager version 10.0.1 Description: The issue is related to weaknesses in the authentication procedure of the Identity Manager component, which could allow an authenticated user to modify or cancel any...

CVE-2022-42454

Insights for Vulnerability Remediation IVR is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access...

Information disclosure

Insights for Vulnerability Remediation IVR is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access...

CVE-2022-46432

An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service DoS...

CVE-2022-46423

An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service...

PT-2022-27872 · Tp Link · Tp-Link Tl-Wr743Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR743ND V1 versions prior to 3.12.20 Description: An exploitable firmware modification vulnerability was discovered, allowing an attacker to conduct a Man-in-the-Middle MITM attack to modify the user-uploaded firmware image and...

PT-2022-27868 · NetGear · Netgear Xwn5001 Powerline 500 Wifi Access Point

Name of the Vulnerable Software and Affected Versions: Netgear XWN5001 Powerline 500 WiFi Access Point versions v0.4.1.1 and earlier Description: An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a...

CVE-2022-46424

Affected product: Netgear XWN5001 Powerline 500 WiFi Access Point. Vulnerability: exploitable firmware modification allowing a MITM attacker to modify a user-uploaded firmware image and bypass CRC checks, enabling arbitrary code execution or Denial of Service. Root cause/condition: vulnerable fir...

PT-2022-27867 · NetGear · Netgear Wnr2000V1

Name of the Vulnerable Software and Affected Versions: Netgear WNR2000v1 versions 1.2.3.7 and earlier Description: An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a Man-in-the-Middle MITM attack to modify the user-uploaded...