CVE-2022-41912

An authentication bypass flaw was discovered in the crewjam/saml go package. A remote unauthenticated attacker could trigger it by sending a SAML request. This would allow an escalation of privileges and then enable compromising system integrity...

WordPress Quiz And Survey Master has an unspecified vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Quiz And Survey Master 7.3.10 and earlier versions contain a security vulnerability. An attacker...

CVE-2022-43989

Password recovery vulnerability in SICK SIM2x00 ARM Partnumber 1092673 and 1081902 with firmware version = 1.2.0 as soon as possible available in SICK Support Portal...

Design/Logic Flaw

Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version = 1.6.0 as soon as possible available in SICK Support Portal...

Design/Logic Flaw

Password recovery vulnerability in SICK SIM4000 PPC Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and there...

Design/Logic Flaw

Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby...

CVE-2022-27582

CVE-2022-27582 affects SICK SIM4000 (PPC) Partnumber 1078787, with versions <= 1.10.1. A password recovery mechanism allows an unprivileged remote attacker to gain access to the user level RecoverableUserLevel, resulting in privilege elevation and impact to confidentiality, integrity, and avai...

CVE-2022-27586

Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version = 2.0.0 as soon as possible available in SICK Support Portal...

Security Bulletin: Multiple vulnerabilities in IBM QRadar SIEM (CVE-2013-5448, CVE-2013-6307, CVE-2013-5463)

Abstract Cross Site Scripting and injection vulnerabilities have been discovered within IBM Security QRadar SIEM. Content VULNERABILITY DETAILS: CVE ID:CVE-2013-5448 DESCRIPTION: A Cross Site Scripting vulnerability has been discovered within the IBM QRadar Security Information and Event Manageme...

The vulnerability of the GPSd tracking demon, related to buffer overflow in the stack, allows a intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the tracking demon for GPS receivers, GPSd, is related to buffer overflow in the stack. Exploiting this vulnerability allows a hacker to access confidential data, compromise its integrity, and cause service failures...

EUVD-2022-38709

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2022-0852

CVE-2022-0852 concerns the convert2rhel utility, where a Red Hat account password is passed to subscription-manager via the command line. Connectors note that local attackers on a system with the affected convert2rhel can view the password in process command lines (e.g., via htop/ps), risking con...

OPENSUSE-SU-2022:10073-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 103.0.5060.134 boo1201679: CVE-2022-2477 : Use after free in Guest View CVE-2022-2478 : Use after free in PDF CVE-2022-2479 : Insufficient validation of untrusted input in File CVE-2022-2480 : Use after free in Service...

AZL-10387 CVE-2022-0670 affecting package ceph for versions less than 16.2.10-1

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of...

PT-2022-23371 · Atos · Atos Unify Openscape Branch +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape SBC versions 9 through 10 before 10R2.2.1 Atos Unify OpenScape Branch versions 9 through 10 before 10R2.1.1 Atos Unify OpenScape BCF version 10 before 10R9.12.1 Description: A remote code execution issue may allow an...

CVE-2021-46741

The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity...

CVE-2021-46741

The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity...

CVE-2021-46741

The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity...

Design/Logic Flaw

The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity...

CVE-2021-46741

Technical details about CVE-2021-46741 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins to determine affected products, impact, and fixes.