CVE-2022-28782

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

CVE-2022-28782

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

Improper access control

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

CVE-2022-28782

CVE-2022-28782 concerns Samsung’s Contents To Window in the context of the SMR May-2022 Release 1. The issue is described as an improper access control that could allow a physical attacker to install a package before the Setup wizard finishes. The available remediation is a patch that blocks the ...

CVE-2022-28782: Improper Protection of Alternate Path

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

PT-2022-19230 · Unknown · Contents To Window

Name of the Vulnerable Software and Affected Versions: Contents To Window versions prior to SMR May-2022 Release 1 Description: The issue is related to improper access control, allowing a physical attacker to install a package before the completion of the Setup wizard. This can be exploited by a...

CVE-2022-0363

The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, allowing any authenticated users, such as subscribers, to call it and import mycred setup, thus creating badges, managing points or creating arbitrary posts...

OpenSSL dsa_sign_setup Disclosure of Protected Information

The vulnerability of the dsasignsetup function in the OpenSSL library is related to the exposure of protected information. Exploiting this vulnerability could allow an attacker to circumvent the cryptographic mechanisms used for encryption protection...

GSD-2022-1001649 spi: cadence-quadspi: fix protocol setup for non-1-1-X operations

spi: cadence-quadspi: fix protocol setup for non-1-1-X operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit...

PT-2022-29325

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A refcount leak was discovered in the ill acc of setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17.3,...

PT-2022-30117

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15.32 Description The issue concerns error handling in ath10k setup msa resources. It was introduced in version v5.8 and fixed in version v5.15.33. The actual impact and attack plausibility have not yet be...

PT-2022-29992

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A refcount leak was discovered in the ill acc of setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.3...

PT-2022-29451

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.17.1 Description The issue concerns a fix in the return value of the setup handler in kgdboc. It was introduced in version 4.20 and fixed in version 5.17.2. The actual impact and attack plausibility have no...

PT-2022-29485

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.17.1 Description The issue concerns error handling in ath10k setup msa resources. It was introduced in version v5.8 and fixed in version v5.17.2. The actual impact and attack plausibility have not yet been...

PT-2022-29666

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A refcount leak was discovered in the ill acc of setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.2...

PT-2022-30618

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue concerns a fix in the return value of the setup handler. It was introduced in version v4.19.2 and fixed in version v4.19.238. The actual impact and attack plausibility have not yet...

PT-2022-30502

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.4.188 Description The issue concerns a fix in the return value of the setup handler in kgdboc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-30336

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns a fix in the return value of the setup handler in kgdboc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-30277

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A refcount leak was discovered in the ill acc of setup function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For versions prior to...

PT-2022-30468

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A refcount leak was discovered in the ill acc of setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.18...