CVE-2022-3438 Open Redirect in ikus060/rdiffweb

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

PT-2022-34715 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: A bug exists in the extents parsing of the ext4 file system when eh entries equals 0 and eh depth is greater than 0. The actual impact and potential for attack have not been proven yet...

PT-2022-34746 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue concerns the slub component in the Linux Kernel, specifically with the flush cpu slab and free slab functions being invoked in a task context. The actual impact and potential for...

PT-2022-34773 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: A percpu memory leak was discovered in the nf tables module at the nf tables addchain function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

CVE-2022-39876

Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI...

CVE-2022-39866

Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

CVE-2022-39865

Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

PT-2022-25051 · Unknown · Quick Share

Name of the Vulnerable Software and Affected Versions: QuickShare versions prior to 13.2.3.5 Description: The issue is related to improper access control, allowing attackers to access sensitive information via implicit broadcast. Recommendations: For versions prior to 13.2.3.5, update to version...

PT-2022-25066 · Samsung · Samsung Account

Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 13.5.0 Description: The issue allows attackers to unauthorized logout due to a sensitive log information leakage. Recommendations: For versions prior to 13.5.0, update to version 13.5.0 or later to resolve th...

JVN#00845253: Growi vulnerable to improper access control

GROWI provided by WESEEK, Inc. contains an improper access control vulnerability CWE-284. Impact A user who can login to the affected product may download the markdown data from the pages set to private by the other users. Solution Update the software Update the software to the following versions...

PT-2022-25048 · Unknown · Factorycamera

Name of the Vulnerable Software and Affected Versions: FactoryCamera versions prior to 3.5.51 Description: A path traversal issue exists in the AtBroadcastReceiver component of FactoryCamera, allowing attackers to write arbitrary files with FactoryCamera privileges. Recommendations: For versions...

PT-2022-25049 · Uphelper · Uphelper

Name of the Vulnerable Software and Affected Versions: UPHelper library versions prior to 3.0.12 Description: The issue allows attackers to access sensitive information via implicit intent, specifically through an implicit intent hijacking vulnerability in the UPHelper library. Recommendations: F...

D-BUS 输入验证错误漏洞

D-BUS is a message bus system, which is mainly used for inter-process communication and remote procedure calls. A security vulnerability exists in D-BUS versions prior to 1.12.24-0+deb11u1, which stems from the inclusion of multiple vulnerabilities in D-Bus that can be exploited by an attacker to...

CVE-2022-40494

NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters...

PT-2022-5348 · Pjsip +1 · Pjsip +1

Name of the Vulnerable Software and Affected Versions: PJSIP versions prior to 2.13 Description: The issue is related to the incorrect switching from SRTP media transport to basic RTP upon SRTP restart when processing certain packets, causing media to be sent insecurely. This impacts all PJSIP...

PT-2022-4956 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: OMRON CX-Programmer versions 9.78 and prior Description: The issue is related to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. This vulnerability is associated with the possibility of writing beyond the buffer...

Veritas NetBackup SQL注入漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental data. A SQL injection...

PT-2022-26355 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0.0.1 Veritas related products affected versions not specified Description: An issue was discovered that can cause the NetBackup Primary server nbars process to crash, resulting in a denial of service. T...

PT-2022-26354 · Veritas · Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0.0.1 Veritas related products affected versions not specified Description: An issue was discovered that makes the NetBackup Primary server vulnerable to a denial of service attack through the...

Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental data. A security vulnerabili...