USN-5678-1 linux-aws, linux-gcp-4.15 vulnerabilities

It was discovered that the SUNRPC RDMA protocol implementation in the Linux kernel did not properly calculate the header size of a RPC message payload. A local attacker could use this to expose sensitive information kernel memory. CVE-2022-0812 Moshe Kol, Amit Klein and Yossi Gilad discovered tha...

The vulnerability of the file-sharing software for disconnected desktops, Warpinator, arises from an improper definition of the link before accessing files. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the file-sharing software between remote desktops in Warpinator relates to the improper handling of links before accessing files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Altair HyperView Player 安全漏洞

Altair HyperView Player is a standalone 3D viewer from Altair Japan. It is used to share CAE models and simulation results. A security vulnerability exists in Altair HyperView Player that originates from uninitialized memory...

MISP 信息泄露漏洞

MISP is an open source software solution. It is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. information leakage vulnerability exists in versions of MISP prior to 2.4.164, which stems...

Warpinator 后置链接漏洞

Warpinator is an open source file sharing library for Linux Mint that shares files across a LAN. Files are sent and received over the local network. A security vulnerability exists in Warpinator that stems from allowing access to directories other than those intended, such as symbolic directory...

IBM Robotic Process Automation Access Control Error Vulnerability (CNVD-2022-68277)

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. An Access Control Error vulnerability exists in IBM Robotic Process Automation...

PT-2022-26520

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.164 Description The issue allows attackers to discover role names, which is information that should only be accessible to the site admin. Recommendations For versions prior to 2.4.164, update to version 2.4.164 or...

CVE-2022-39877

Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-39877

Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-39865

Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

Improper access control

Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-39877

Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

PT-2022-25069 · Unknown · Group Sharing

Name of the Vulnerable Software and Affected Versions: Group Sharing versions prior to 13.0.6.15 Description: The issue is related to improper access control in ProfileSharingAccount within Group Sharing, allowing attackers to identify the device. This can occur in Android versions S12 and below,...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 1.7.89.0, which stems from an improper access control vulnerability in...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices is a series of Samsung mobile devices, including cell phones, tablets, etc. SAMSUNG Mobile devices Android S12 before 13.0.6.15, Android R11 13.0.6.14 has an access control error vulnerability, which originates from the existence of access control in ProfileSharingAccount i...

CVE-2022-39877

CVE-2022-39877: Affected is Samsung Group Sharing’s ProfileSharingAccount. The root cause is improper access control in ProfileSharingAccount in Group Sharing, affecting Android S (12) prior to 13.0.6.15 and Android R (11) prior to 13.0.6.14 (and below). The vulnerability allows an attacker to id...

CVE-2022-41294

IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807...

CVE-2022-41294

IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807...

Threat Source newsletter (Oct. 6, 2022) — Continuing down the Privacy Policy rabbit hole

As I wrote about last week, Ive been diving a lot into apps privacy policies recently. And I was recently made aware of a new type of app I never knew existed -- family trackers. There are countless mobile apps for parents to track their children or other family members based on their location,...

CVE-2022-41294

CVE-2022-41294 affects IBM Robotic Process Automation (RPA) products, including IBM RPA for Cloud Pak, Service, and standard RPA, with versions before 21.0.5. The concrete vulnerability is improper access control that enables cross-origin resource sharing via the bot API. The IBM security bulleti...