3797 matches found
PT-2022-15842 · Mcafee · Skyhigh Swg
Name of the Vulnerable Software and Affected Versions: Skyhigh SWG versions 8.x through 8.2.27 Skyhigh SWG versions 9.x through 9.2.22 Skyhigh SWG versions 10.x through 10.2.11 Skyhigh SWG versions 11.x through 11.2.0 Description: The issue allows a remote attacker to bypass authentication into t...
PT-2022-6074 · Atlassian · Jira Align Server
Name of the Vulnerable Software and Affected Versions: Atlassian Jira Align Server versions prior to 10.109.2 Description: The issue is related to the MasterUserEdit API in Atlassian Jira Align Server, which allows an authenticated attacker with the People role permission to modify any user's rol...
[SECURITY] Fedora 35 Update: golang-github-tscholl2-siec-0-3.20211128git9bdfc48.fc35
Super-Isolated Elliptic Curve Implementation in Go...
CVE-2022-30622
Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sysusernamepasswd.cmd - The server loads the request clearly by default. Disclosure of hard-coded credit information within...
Default credentials
Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sysusernamepasswd.cmd - The server loads the request clearly by default. Disclosure of hard-coded credit information within...
CVE-2022-30622 Chcnav - P5E GNSS Information disclosure
Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sysusernamepasswd.cmd - The server loads the request clearly by default. Disclosure of hard-coded credit information within...
CVE-2022-30622: Use of Hard-coded Credentials
Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sysusernamepasswd.cmd - The server loads the request clearly by default. Disclosure of hard-coded credit information within...
Jira Align - Improper Authorization in MasterUserEdit API - CVE-2022-36803
The MasterUserEdit API in Atlassian Jira Align before version 10.109.2 allows an authenticated attacker with the People role permission can use the MasterUserEdit API to modify any users role to Super Admin. This vulnerability was reported by Jacob Shafer from Bishop Fox. Affected versions: versi...
Beijing Century Super Star Information Technology Development Co., Ltd. learning through the quality of engineering platform there are logical flaws vulnerabilities
Beijing Century Super Star Information Technology Development Co., Ltd. is an education informatization enterprise driven by technology, product and service innovation. A logic flaw vulnerability exists in the Beijing Century Super Star Information Technology Development Limited Liability Company...
Fedora: Security Advisory for golang-github-tscholl2-siec (FEDORA-2022-ba365d3703)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: golang-github-tscholl2-siec-0-3.20211128git9bdfc48.fc36
Super-Isolated Elliptic Curve Implementation in Go...
PT-2022-31541
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.15 through 5.15.46 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6....
PT-2022-32231
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do fill super function. This problem was introduced in version v2.6.15 and is fixed in version...
PT-2022-32313
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-32121
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-31237
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-30897
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-31980
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do fill super function. This problem was introduced in version v2.6.15 and is fixed in version...
PT-2022-31792
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description A memory leak issue was discovered in the jffs2 do fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
Malicious code in proton-super-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a91667df730f49d5f2c35a384f5c407afef6f317c05544309d59b7d30ea0062 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...