CVE-2022-20537

In createDialog of WifiScanModeActivity.java, there is a possible way for a Guest user to enable location-sensitive settings due to a missing permission check. This could lead to local escalation of privilege from the Guest user with no additional execution privileges needed. User interaction is...

Trend Micro Apex One Damage Cleanup Engine Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

December 13, 2022, cumulative update for SharePoint Enterprise Server 2013 (KB5002317)

None None...

Integration Discovered Host

This host was discovered by an integration and added to the scan. This plugin reports which integration discovered this host and added it to the scan. Please see specific integration configuration for more details. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

GHSA-RP2V-V467-Q9VQ GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package

Impact Running GuardDog against a specially-crafted package can allow an attacker to write an arbitrary file on the machine where GuardDog is executed. This is due to a path traversal vulnerability when extracting the .tar.gz file of the package being scanned, which exists by design in the...

PT-2022-36797 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state includes functions such as gdev mem open scan lines interleaved, mem open, and gs...

SUSE SLED15: WebKit2GTK-4.0-lang / WebKit2GTK-4.1-lang / WebKit2GTK-5.0-lang / etc (SUSE-SU-2022:4207-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4207-1 advisory. Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafte...

Backdoor.Win32.Serman.a MVID-2022-0659 Unauthenticated Open Proxy

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/f312e3a436995b86b205a1a37b1bf10f.txt Contact: [email protected] Media: twitter.com/malvuln Backup media: infosec.exchange/@malvuln Threat: Backdoor.Win32.Serman.a Vulnerability:...

PT-2022-5987 · Aveva · Aveva Edge

Name of the Vulnerable Software and Affected Versions: AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior Description: The issue allows a client to provide a malicious connection string, potentially enabling an adversary to port scan the LAN based on the hosts' responses. This is...

SSH Per-Host Command Logging

If the 'Always report SSH commands' advanced preference is selected in the scan policy, this plugin will report all commands run over SSH on the host in a machine readable format. TRUSTED...

Dismember - Scan Memory For Secrets And More

Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular expression...

LDAP Active Directory - Person Enumeration

Binary data ldapenumperson.nbin...

GSD-2022-1007501 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commit...

GSD-2022-1007040 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

PT-2022-35246 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue concerns the KVM arm64 vgic, specifically with the exit condition in the scan its table function. The actual impact and attack plausibility have not yet been proven...

PT-2022-35501 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to an invalid address access when enabling SCAN log level in the brcmfmac wifi driver. The actual impact and attack plausibility have not yet been proven...

PT-2022-35818 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.298 Description: The issue concerns the KVM arm64 vgic, specifically with the exit condition in the scan its table function. The actual impact and attack plausibility have not yet been proven...

PT-2022-35647 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to an invalid address access when enabling SCAN log level in the brcmfmac wifi driver. The actual impact and attack plausibility have not yet been proven...

PT-2022-35295 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to an invalid address access when enabling SCAN log level in the brcmfmac wifi driver. The actual impact and attack plausibility have not yet been proven...

Microsoft Edge (Chromium) < 107.0.1418.42 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.42. It is, therefore, affected by multiple vulnerabilities as referenced in the November 10, 2022 advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...