F5 BIG-IP LTM and APM NTLM out-of-bounds read vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An out-of-bounds read vulnerability exists in F5 BIG-IP LTM and APM NTLM, when LTM health check probes or APM single sign-on...

GSD-2022-1004486 zonefs: fix zonefs_iomap_begin() for reads

zonefs: fix zonefsiomapbegin for reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.50 by commit...

PT-2022-32901

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.125 Description The issue concerns a fix in the zonefs iomap begin function for reads. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32748

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.50 Description The issue is related to the zonefs iomap begin function for reads. It was introduced in version v5.6 and fixed in version v5.15.50. The actual impact and attack plausibility have not yet been...

PT-2022-32547

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.7 Description A potential security issue has been identified in the Linux Kernel, specifically in the zonefs iomap begin function for reads. The actual impact and attack plausibility have not yet been prove...

snyk-broker Path Traversal before v4.73.0

This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

GHSA-GQ75-5GC3-RFWG snyk-broker Path Traversal before v4.73.0

This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

CVE-2022-35650

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

CVE-2020-7649

This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

CVE-2020-7649

This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

Directory traversal

This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

CVE-2020-7649

CVE-2020-7649 affects the package snyk-broker prior to version 4.73.0. The vulnerability is a directory traversal issue (in the exports function when reading configs) that allows an attacker with access to Snyk’s internal network to read arbitrary files. Impact: confidentiality of data could be e...

CVE-2020-7649 Directory Traversal

This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

CVE-2020-7649

This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

CVE-2020-7649

This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

CVE-2022-21581

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21555

Vulnerability in the MySQL Shell for VS Code product of Oracle MySQL component: Shell: GUI. Supported versions that are affected are 1.1.8 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Shell for VS Code executes to...

CVE-2022-21542

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2022-30570

The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read access to application information on the...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An input validation error vulnerability exists in Oracle MySQL, which can be exploited by an attacker to cause certain unauthorized update, insert, o...