CVE-2022-39186

CVE-2022-39186 affects EXFO BV-10 Performance Endpoint Unit. The root cause is a misconfigured permissions setting on the system configuration file, as reported by multiple sources (NVD, CNNVD). Potential impact includes high confidentiality exposure, with local attack vector and low attack compl...

PT-2023-13708 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO BV-10 Performance Endpoint Unit affected versions not specified Description: The issue concerns an undocumented hard-coded privileged user in the EXFO BV-10 Performance Endpoint Unit. This means that there is a user account with elevated...

CVE-2022-39184 EXFO - BV-10 Performance Endpoint Unit Authentication bypass

EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass...

CVE-2022-39185

The CVE-2022-39185 entry covers the EXFO BV-10 Performance Endpoint Unit, describing an undocumented hard-coded privileged user that grants elevated access. Affected component is the BV-10 unit itself; the root cause is the presence of an undocumented privileged account. Impact is high, with pote...

PT-2023-12668 · Hitachi · Lumada Apm

Name of the Vulnerable Software and Affected Versions: Lumada APM on-premises versions 6.0.0.0 through 6.4.0. Description: A vulnerability exists in Lumada APM's User Asset Group feature due to a flaw in access control mechanism implementation on the "Limited Engineer" role, granting it access to...

ALSA-2023:0101 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: memory corruption in AX88179178A based USB ethernet device. CVE-2022-2964 kernel: i915: Incorrect GPU TLB flush can lead to random memory access CVE-2022-4139 For more details about the...

CVE-2022-39185 EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user...

CVE-2022-39184

CVE-2022-39184 affects EXFO BV-10 Performance Endpoint Unit. The vulnerability is an authentication bypass where a user can manually manipulate access to enable bypass. Documented impact is high ( Confidentiality/Integrity/Availability = High) with CVSS 3.1 base score 9.8. Connected sources confi...

PT-2023-9338 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a refcount leak in the amd pmc probe function of the Linux kernel. The pci get domain bus and slot function takes a reference, which the caller should release b...

EulerOS Virtualization 2.10.1 : unbound (EulerOS-SA-2023-1156)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving...

EulerOS Virtualization 2.10.1 : bind (EulerOS-SA-2023-1141)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance,...

K56412001: BIG-IP SSL OCSP Authentication profile vulnerability CVE-2023-22323

Security Advisory Description When OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization. CVE-2023-22323 Impact System performance can degrade until the Traffic Management Microkernel TMM process is either forced to...

Unbreakable Enterprise kernel security update

5.4.17-2136.315.5 - Revert 'xfs: Lower CIL flush limit for large logs' Sherry Yang Orabug: 34917369 - Revert 'xfs: Throttle commits on delayed background CIL push' Sherry Yang Orabug: 34917369 - Revert 'xfs: fix use-after-free on CIL context on shutdown' Sherry Yang Orabug: 34917369...

SUSE: Security Advisory (SUSE-SU-2023:0036-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2023-1007)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-10617 · Debug-Js · Debug-Js

Name of the Vulnerable Software and Affected Versions: debug-js debug versions up to 3.0.x debug-js debug version 2.6.x up to 2.6.8 Description: A vulnerability has been found in debug-js debug, affecting the useColors function of the file src/node.js. The manipulation of the argument str leads t...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-1117)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2023-06856)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability that stems from the fact that the performance API does not properly hide whether a redirect is noted for requesting a cross-domain...

SUSE: Security Advisory (SUSE-SU-2023:0033-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : dhcp (EulerOS-SA-2023-1032)

According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND 9 Supported...