PT-2022-25959 · Kernel · Kernel

Name of the Vulnerable Software and Affected Versions: Kernel affected versions not specified Description: The issue is related to an out-of-bounds read, which could potentially lead to memory overwriting if successfully exploited. Recommendations: At the moment, there is no information about a...

CVE-2022-41585

The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting...

CVE-2022-41584

The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting...

CVE-2022-41585

The CVE-2022-41585 entry maps to Huawei HarmonyOS kernel module out-of-bounds read vulnerability. Descriptions in multiple connected records state that a kernel module reads beyond the end of a buffer, and successful exploitation could lead to memory overwriting. The underlying cause cited is ins...

CVE-2022-41585

The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting...

PT-2022-25958 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The kernel module has an out-of-bounds read issue. Successful exploitation of this issue may cause memory overwriting. Recommendations: At the moment,...

CVE-2022-41584

CVE-2022-41584 describes an out-of-bounds read vulnerability in a kernel module that can lead to memory overwriting. The entry indicates a HIGH impact across confidentiality, integrity, and availability, with LOCAL attack vector, LOW required privileges, and NO user interaction. Affected componen...

CVE-2022-41584

The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting...

CVE-2022-26235

A vulnerability was discovered in the Remisol Advance v2.0.12.1 and below for the Normand Message Server. On installation, the permissions set by Remisol Advance allow non-privileged users to overwrite and/or manipulate executables and libraries that run as the elevated SYSTEM user on Windows...

UBUNTU-CVE-2022-26240

The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...

Beckman Coulter Remisol Advance 安全漏洞

Beckman Coulter Remisol Advance is a leading middleware solution for clinical laboratories, bridging laboratory information systems LIS and instrumentation from Beckman Coulter, Inc. A security vulnerability exists in Beckman Coulter Remisol Advance v2.0.12.1 and prior versions, which stems from...

PT-2022-24534 · Asus · Armoury Crate Service

Name of the Vulnerable Software and Affected Versions: Armoury Crate Service affected versions not specified Description: The issue concerns Armoury Crate Service's logging function, which lacks sufficient validation to check if the log file is a symbolic link. This allows a physical attacker wit...

CVE-2022-32807

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

GHSA-GG53-WF5X-R3R6 XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference

Impact A bug in the security cache is storing rules associated to document Page1.Page2 and space Page1.Page2 in the same cache entry. That means that it's possible to overwrite the rights of a space or a document by creating the page of the space with the same name and checking the right of the n...

XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference

Impact A bug in the security cache is storing rules associated to document Page1.Page2 and space Page1.Page2 in the same cache entry. That means that it's possible to overwrite the rights of a space or a document by creating the page of the space with the same name and checking the right of the n...

Design/Logic Flaw

This affects the package com.diffplug.gradle:goomph before 3.37.2. It allows a malicious zip file to potentially break out of the expected destination directory, writing contents into arbitrary locations on the file system. Overwriting certain files/directories could allow an attacker to achieve...

CVE-2021-40647

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

PT-2022-20581 · Xwiki · Xwiki Platform Security Parent Pom

Name of the Vulnerable Software and Affected Versions: XWiki Platform Security Parent POM versions 5.0 through 12.10.10 XWiki Platform Security Parent POM versions 13.0.0 through 13.4.5 XWiki Platform Security Parent POM versions 13.5.0 through 13.10.0 Description: A bug in the security cache...

CVE-2022-38176

An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as...

CVE-2022-36562

Incorrect access control in the install directory C:\Ruby31-x64 of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory...