CVE-2022-22599

Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. A person with physical access to a device may be able to use Siri to obtain some location information from the lock...

CVE-2022-22579

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. Processing a maliciously crafted STL file may lead to unexpected application...

GLSA-202202-03 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202202-03 Mozilla Firefox: Multiple vulnerabilities - A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. This bug could only be triggered when accessibility was...

CVE-2022-24755

CVE-2022-24755 affects Bareos Director when built/configured for PAM: authorization checks were skipped, allowing login with expired accounts or passwords. Affected versions are Bareos Director >= 18.2 but before 21.1.0, 20.0.6, and 19.2.12. The root cause is missing authorization checks (circ...

Huawei Emui and Magic UI Unauthorized Access Vulnerability

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to unauthorized access, which could be exploited by attackers to compromise confidentiality...

ASSAMEE - Free Advance Encryptor For Anon Cloud

ASSAMEE is a free Advance encryptor for Anonfiles. It uses an advanced encryption method to encrypt the directory with AES-256. The data will store on anonfiles.com in an encrypted format. The ASSAMEE requires a download ID to download and decrypt the data from Anonfiles. Downloading encrypted da...

Microsoft Remote Desktop Protocol Client 缓冲区错误漏洞

Microsoft Remote Desktop Protocol Client is a client software application for connecting to remote desktops from Microsoft Corporation USA. A buffer error vulnerability exists in the Microsoft Remote Desktop Protocol Client. The following products and editions are affected: Windows 10 Version 21H...

Microsoft Windows Point-to-Point Tunneling Protocol 输入验证错误漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. An input validation error...

Microsoft Windows HTML Platform 安全特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows HTML Platform due to a security feature issue. The following products and versions are affected: Windows 7 for 32-bit Systems Service Pack...

webmin Elevation of Privilege Vulnerability (CNVD-2022-17023)

Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. webmin versions prior to 1.990 have an elevation of privilege vulnerability that stems from a faulty program to high-level local procedure calls. An attacker could exploit this vulnerability...

Virtuozzo Hybrid Infrastructure 5.0 Update 1 (5.0.1-42)

This update provides support for more guest operating systems, as well as bug fixes and improvements. Vulnerability id: VSTOR-50067 Fixed the false-positive alert "Swap space is used." Vulnerability id: VSTOR-51196 Fixed the false-positive alert "Disk may run out of space" that appears for a cach...

The vulnerability of Windows Mobile Device Management for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Windows Mobile Device Management for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

[SECURITY] Fedora 34 Update: qemu-5.2.0-9.fc34

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

The vulnerability of Windows Mobile Device Management for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Windows Mobile Device Management for Windows operating systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a hacker to circumvent security restrictions.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Microsoft DWM Core Library on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Directory Traversal

firefox is vulnerable to directory traversal. The vulnerability exists due to a Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an arbitrary directory. This bug only affects Firefox on Windows. Other operating systems ar...

Path Traversal in Eclipse Vert

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0-milestone1, 4.0.0-milestone2, 4.0.0-milestone3, 4.0.0-milestone4, 4.0.0-milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

The vulnerability of the iOS, iPadOS, watchOS, tvOS, macOS, and Mac OS X operating systems relates to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the iOS, iPadOS, watchOS, tvOS, macOS, and Mac OS X operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for personal devices used by the U.S. Microsoft Windows DWM Core Library has an elevation of privilege vulnerability, for which no detailed vulnerability details are available...