CVE-2022-48198

The ntpddriver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System ROS allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled timereftopic...

Kelixun Communication Command and Dispatch Management Platform 命令注入漏洞

Kelixun Communication Command and Dispatch Management Platform Kelixun is a communication command and dispatch management platform from Kelixun, China. A command injection vulnerability exists in Kelixun Communication Command and Dispatch Management Platform version 1.0, which originates from os...

OpenSSL x509 Vulnerability (20250522) - Windows

OpenSSL is prone to a vulnerability in the x509 application. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

The vulnerability of the application for publishing director entries in the share_directory domain of the REDEOS operating system allows a perpetrator to elevate their privileges and execute arbitrary commands.

The vulnerability of the application for publishing director entries in the sharedirectory domain of the REDEOS operating system is related to insecure management of privileges during the execution of the D-Bus service. Exploiting this vulnerability allows an attacker to increase their privileges...

The vulnerability of the `acquire_otg_master_pipe_for_stream()` function in the DRI support driver for AMD graphics cards in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the acquireotgmasterpipeforstream function in the DRI support driver for AMD graphics cards in Linux operating systems is related to a countable amount of significance loss. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the create_lease_buf() function in the SMB subsystem of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the createleasebuf function in the SMB subsystem of Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Windows Routing and Remote Access service (RRAS) on the Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the Windows Routing and Remote Access service RRAS on Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the FUN_00459fdc function in the Totolink A3002R router’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of FUN00459fdc in the Totolink A3002R router’s microprogramming software relates to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the CalculateSwathAndDETConfiguration() function in the DRI driver for AMD GPU-based Linux operating systems allows a malicious actor to trigger a service failure.

The vulnerability of the CalculateSwathAndDETConfiguration function in the DRI driver for AMD kernel-based Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Node.js < 20.19.2, 21.x < 22.15.1, 23.x < 23.11.1, 24.x < 24.0.2 DoS Vulnerability - Windows

Node.js is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js";...

The vulnerability of the dpcdcd_extend_address_range() function in the DRI driver for AMD graphics cards in Linux operating systems allows a malicious actor to cause a service failure.

The vulnerability of the dpcdcdextendaddressrange function in the DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-40799

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L = 2.60B15 allows an authenticated attacker to execute OS level commands on the device...

CVE-2022-38991

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-38995

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44456

CONPROSYS HMI System CHS Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request...

CVE-2022-36054

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system file os/net/ipv6/sicslowpan.c contains an input function that processes incoming packets and copies them into a packet buffer. Because of a...

CVE-2022-29848

In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive operating-system attributes from a host that is accessible by the WhatsUp Gold system...

CVE-2022-20964

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of user input within requests as part of the...

CVE-2022-38990

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability...

CVE-2021-21448

SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PCs memory. Under certain conditions the attacker can access information which would otherwise be restricted. The exploit can only be executed locally on th...