2298 matches found
CVE-2022-44844
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function...
Command injection
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function...
CVE-2022-44844: Improper Neutralization of Special Elements used in an OS Command
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function...
CVE-2022-44844
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function...
CVE-2022-44844
CVE-2022-44844 describes a command injection in the TOTOLINK A7100RU (version 7.4cu.2313_B20191024) via the pass parameter in the function setting/setOpenVpnCfg . The vulnerability is documented as a remote (network) issue with no required user interaction and no privileges required, causing high...
CVE-2022-35719
IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...
CVE-2022-35719
IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...
Information disclosure
IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...
CVE-2022-35719
IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...
CVE-2022-35719
CVE-2022-35719 affects IBM MQ Internet Pass-Thru (IPT) versions 2.1, 9.2 LTS and 9.2 CD. The issue: when tracing is enabled, IPT stores potentially sensitive information in trace files that could be read by a local user. Impact is local confidentiality breach for trace data. Remediation remains: ...
IBM MQ Internet Pass-Thru 日志日志信息泄露漏洞
IBM MQ Internet Pass-Thru is an International Business Machines IBM product for supporting the implementation of messaging between remote sites on the Internet. The product is an extended functionality component of IBM MQ that serves as a protocol channel or proxy for establishing protocols durin...
Vulnerability fixed in IBM MQ
A vulnerability has been fixed in MQ Internet Pass-Thru. The vulnerability allows a local malicious party to potentially see sensitive information in trace files of the application when this feature is enabled. IBM has released updates to fix the vulnerabilities in MQ. For more information, see:...
PT-2022-35144 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential issue exists in the jbd2 component of the Linux Kernel, related to the fc do one pass function. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2022-35563
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description A potential issue exists in the jbd2 component of the Linux Kernel, related to the fc do one pass function. The actual impact and attack plausibility have not yet been proven. Recommendation...
CVE-2022-35719: Insertion of Sensitive Information into Log File
IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...
PT-2022-22949
Name of the Vulnerable Software and Affected Versions IBM MQ Internet Pass-Thru versions 2.1, 9.2 LTS, and 9.2 CD Description The issue concerns the storage of potentially sensitive information in trace files by IBM MQ Internet Pass-Thru, which could be accessed by a local user. Recommendations F...
CVE-2022-3973
A vulnerability classified as critical has been found in Pingkon HMS-PHP. Affected is an unknown function of the file /admin/admin.php of the component Data Pump Metadata. The manipulation of the argument uname/pass leads to sql injection. It is possible to launch the attack remotely. The exploit...
CVE-2022-3973: Improper Neutralization
A vulnerability classified as critical has been found in Pingkon HMS-PHP. Affected is an unknown function of the file /admin/admin.php of the component Data Pump Metadata. The manipulation of the argument uname/pass leads to sql injection. It is possible to launch the attack remotely. The exploit...