7544 matches found
PT-2022-14577 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to a possible access to voicemail information due to SQL injection in the queryInternal function of CallLogProvider.java. This could lead to local information...
CVE-2022-20439
In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172...
KB5018410: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (October 2022)
The remote Windows host is missing security update 5018410. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
Microsoft OLE DB Provider for SQL Server 安全漏洞
Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows unified access to data from a variety of sources.A remote code execution vulnerability exists in Microsoft OLE DB Provider for SQL Server, which stems from An attacker can exploit the vulnerability to cause...
Microsoft Windows Security Support Provider Interface 安全漏洞
Microsoft Windows is an operating system for personal devices from Microsoft Corporation USA. An attacker could exploit the vulnerability to gain access to sensitive information...
Microsoft OLE DB Provider for SQL Server 代码注入漏洞
Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified manner.Microsoft OLE DB Provider for SQL Server is vulnerable to remote code execution, which can be exploited by attackers to The vulnerability can be...
PT-2022-5374 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Microsoft Security Support Provider Interface SSPI in the Windows operating system, which is associated with access control weaknesses...
CVE-2022-20439
CVE-2022-20439 affects Android Messaging. The description indicates an unauthorized provider in Messaging could cause a Local Denial of Service, with a base CVSS v3.1 score of 5.5 (Local, Low attack complexity, Privileges required: Low, user interaction: None, availability impact: High). The avai...
PT-2022-5473 · Microsoft · Wdac Ole Db Provider For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft WDAC OLE DB provider for SQL Server. This allows a remote attacker to execute...
CVE-2022-38043
No additional technical details about CVE-2022-38043 are provided in the connected documents. The sources only reiterate the vulnerability name/description. Monitor for updates and verify affected products, root cause, and fixes when new information is published.
PT-2022-5497 · Microsoft · Wdac Ole Db Provider For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft WDAC OLE DB provider for SQL Server. It allows remote attackers to execut...
KB5018478: Windows Server 2012 Security Update (October 2022)
The remote Windows host is missing security update 5018478. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
squid: buffer-over-read in SSPI and SMB authentication
A flaw was found in Squid. An incorrect integer overflow protection in the Squid SSPI and SMB authentication helpers is vulnerable to a buffer overflow attack, resulting in information disclosure...
Dotnetnuke 6.0.x < 9.11.0 Multiple Vulnerabilities (09.11.00)
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is 6.0.x prior to 9.11.0. It is, therefore, affected by multiple vulnerabilities. - A third-party dependency, Moment.js, published security updates to their library. Fixes for the Issue DNN Platfor...
squid: buffer-over-read in SSPI and SMB authentication
A flaw was found in Squid. An incorrect integer overflow protection in the Squid SSPI and SMB authentication helpers is vulnerable to a buffer overflow attack, resulting in information disclosure...
Frontrunning initialize to negatively affect first liquidity provider possible
Lines of code Vulnerability details Impact The initialize-function of an AlgebraPool can be frontrun to set an arbitrary initial price. This will negatively affect the first person to add liquidity to the pool. Proof of Concept There are no restrictions on the AlgebraPool.initializeprice function...
ASB-A-242266172
In Messaging, There has unauthorized provider, this could cause Local Deny of Service...
Upstash Adapter missing token verification
Impact Applications that use next-auth Email Provider and @next-auth/upstash-redis-adapter before v3.0.2 are affected. Description The Upstash Redis adapter implementation did not check for both the identifier email and the token, but only checking for the identifier when verifying the token in t...
CVE-2022-39263
@next-auth/upstash-redis-adapter is the Upstash Redis adapter for NextAuth.js, which provides authentication for Next.js. Applications that use next-auth Email Provider and @next-auth/upstash-redis-adapter before v3.0.2 are affected by this vulnerability. The Upstash Redis adapter implementation...
Design/Logic Flaw
@next-auth/upstash-redis-adapter is the Upstash Redis adapter for NextAuth.js, which provides authentication for Next.js. Applications that use next-auth Email Provider and @next-auth/upstash-redis-adapter before v3.0.2 are affected by this vulnerability. The Upstash Redis adapter implementation...