PT-2022-24729 · Unknown · Gallery Service

Name of the Vulnerable Software and Affected Versions: Gallery service affected versions not specified Description: The issue is related to a missing permission check in the Gallery service, which could lead to a local denial of service. This can be achieved without requiring additional execution...

CVE-2022-41482

Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01 was discovered to contain a buffer overflow in the 0x47c5dc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.16-alt1

3.2.16-alt1 built Oct. 13, 2022 Alexey Shabalin in task 308240 Oct. 11, 2022 Alexey Shabalin - new version 3.2.16 - Fixes for the following security vulnerabilities: + CVE-2022-41323 Potential denial-of-service vulnerability in internationalized URLs...

PT-2022-19292 · F Secure +1 · F-Secure +1

Name of the Vulnerable Software and Affected Versions: F-Secure & WithSecure products affected versions not specified Description: A Denial-of-Service DoS issue was found in F-Secure & WithSecure products. The aerdl.dll unpacker handler function can crash, potentially causing the scanning engine ...

CVE-2022-41404

An issue in the fetch method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2022-37984

Windows WLAN Service Elevation of Privilege Vulnerability...

CVE-2022-38045

Windows Server Service Elevation of Privilege Vulnerability...

Denial Of Service (DoS)

vim is vulnerable to Denial Of Service DoS. A local attacker is able to cause a NULL Pointer Dereference, resulting in denial of service conditions...

Multiple MediaTek chip ril denial-of-service vulnerabilities

MediaTek Inc. is the world's fourth largest fab semiconductor company and a market leader in mobile devices, smart home applications, wireless connectivity technologies and IoT products, with approximately 1.5 billion devices with MediaTek chips built into them available worldwide each year...

PT-2022-17735 · Beckman Coulter · Beckman Coulter Remisol Advance

Name of the Vulnerable Software and Affected Versions: Beckman Coulter Remisol Advance versions v2.0.12.1 and prior Description: The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance allow non-privileged users to overwrite and manipulate...

MediaWiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. MediaWiki suffers from a security vulnerability that stems from the ability to automate search...

SUSE: Security Advisory (SUSE-SU-2022:3305-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-35971 `CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow

TensorFlow is an open source platform for machine learning. If FakeQuantWithMinMaxVars is given min or max tensors of a nonzero rank, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-35965 Segfault in `LowerBound` and `UpperBound` in TensorFlow

TensorFlow is an open source platform for machine learning. If LowerBound or UpperBound is given an emptysortedinputs input, it results in a nullptr dereference, leading to a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

MGASA-2022-0330 Updated gimp packages fix security vulnerability

An issue in gimplayerinvalidateboundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service DoS. CVE-2022-32990...

EUVD-2022-38706

Windows Secure Channel Denial of Service Vulnerability...

Moderate: Red Hat Security Advisory: ruby:2.7 security, bug fix, and enhancement update

An update for the ruby:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2022-31006 Hyperledger Indy DOS vulnerability

indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client connections allowed by the ledger, leaving the ledger unable to be used for its intended purpose...

PT-2022-24742 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a missing permission check in a network service, which could allow for local escalation of privilege without requiring additional execution privileges...

CVE-2022-36090 org.xwiki.platform:xwiki-platform-oldcore Improper Authorization check for inactive users

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Prior to versions 13.1.0.5 and 14.3-rc-1, some resources are missing a check for inactive not yet activated or disabled users in XWiki, including the REST service. This means a disabled user can enable themselv...