Vulnerability of the Windows.Devices.Picker.dll library in operating systems, allowing attackers to escalate their privileges

The vulnerability of the Windows.Devices.Picker.dll library in operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2022-21518 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.7 iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Monterey versions prior to 12.5 Description: The issue allows an app to potentially break out of its sandbox, which could lead to unauthorized access...

多款Apple产品 权限许可和访问控制问题漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A vulnerability in privilege-granting and access control issues exists in Apple iOS prior to 15.6 and iPadOS prior to 15.6, whic...

CVE-2022-30627

This vulnerability affects all of the company's products that also include the FW versions: updatei90cv2.021b20210104, updatei50v1.0.55b20200509, updatex6v2.1.2b202001127, updateb5v2.0.9b20200706. This vulnerability makes it possible to extract from the FW the existing user passwords on their...

Design/Logic Flaw

This vulnerability affects all of the company's products that also include the FW versions: updatei90cv2.021b20210104, updatei50v1.0.55b20200509, updatex6v2.1.2b202001127, updateb5v2.0.9b20200706. This vulnerability makes it possible to extract from the FW the existing user passwords on their...

CVE-2022-30627 Chcnav - P5E GNSS Information disclosure hard coded credentials.

This vulnerability affects all of the company's products that also include the FW versions: updatei90cv2.021b20210104, updatei50v1.0.55b20200509, updatex6v2.1.2b202001127, updateb5v2.0.9b20200706. This vulnerability makes it possible to extract from the FW the existing user passwords on their...

Fedora: Security Advisory for butane (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: butane-0.15.0-2.fc35

Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition...

[SECURITY] Fedora 36 Update: butane-0.14.0-2.fc36

Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Advanced Local Procedure Call with privilege permission and access control issues. The following products and editions are affected:Windows 10...

[SECURITY] Fedora 36 Update: butane-0.15.0-1.fc36

Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition...

The vulnerability of the AVEVideoEncoder component in iOS, tvOS, and iPadOS allows a hacker to execute arbitrary code.

The vulnerability of the AVEVideoEncoder component in iOS, tvOS, and iPadOS lies in the operation of recording data beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the IOAcceleratorFamily component in operating systems such as iOS, iPadOS, macOS, tvOS, and watchOS allows a hacker to execute arbitrary code.

The vulnerability of the IOAcceleratorFamily component in iOS, iPadOS, macOS, tvOS, and watchOS relates to the operation of writing data beyond the buffer boundaries into memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the kernel of iOS, tvOS, watchOS, and macOS allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the kernel in iOS, tvOS, watchOS, and macOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

VulnCheck KEV: CVE-2018-4344

Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution...

VulnCheck KEV: CVE-2020-3837

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges...

CVE-2022-2068

In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there...

CVE-2022-2068 The c_rehash script allows command injection

In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there...

CVE-2022-2068

In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there...

Vulnerability in OpenSSL - The c_rehash script allows command injection

In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there...