K93203055: Java vulnerability CVE-2015-4872

Security Advisory Description Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security. CVE-2015-4872 Impact A remote attacker may affect the integrity of the...

SUSE CVE-2021-3549

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avrelf32loadrecordsfromsection probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as...

CVE-2020-22660

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 SCG200 before 3.6.2.0.795, SmartZone 100 SZ-100 before 3.6.2.0.795, SmartZone 300 SZ300 before 3.6.2.0.795, Virtua...

CVE-2022-47377

Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version = 1.13.4 as soon as possible available in SICK Support Portal...

Design/Logic Flaw

Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version = 1.13.4 as soon as possible available in SICK Support Portal...

CVE-2022-41912

An authentication bypass flaw was discovered in the crewjam/saml go package. A remote unauthenticated attacker could trigger it by sending a SAML request. This would allow an escalation of privileges and then enable compromising system integrity...

WordPress Quiz And Survey Master has an unspecified vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Quiz And Survey Master 7.3.10 and earlier versions contain a security vulnerability. An attacker...

CVE-2022-43989

Password recovery vulnerability in SICK SIM2x00 ARM Partnumber 1092673 and 1081902 with firmware version = 1.2.0 as soon as possible available in SICK Support Portal...

Design/Logic Flaw

Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version = 1.6.0 as soon as possible available in SICK Support Portal...

Design/Logic Flaw

Password recovery vulnerability in SICK SIM4000 PPC Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and there...

Design/Logic Flaw

Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby...

CVE-2022-27586

Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version = 2.0.0 as soon as possible available in SICK Support Portal...

CVE-2022-27582

CVE-2022-27582 affects SICK SIM4000 (PPC) Partnumber 1078787, with versions <= 1.10.1. A password recovery mechanism allows an unprivileged remote attacker to gain access to the user level RecoverableUserLevel, resulting in privilege elevation and impact to confidentiality, integrity, and avai...

Security Bulletin: Multiple vulnerabilities in IBM QRadar SIEM (CVE-2013-5448, CVE-2013-6307, CVE-2013-5463)

Abstract Cross Site Scripting and injection vulnerabilities have been discovered within IBM Security QRadar SIEM. Content VULNERABILITY DETAILS: CVE ID:CVE-2013-5448 DESCRIPTION: A Cross Site Scripting vulnerability has been discovered within the IBM QRadar Security Information and Event Manageme...

The vulnerability of the GPSd tracking demon, related to buffer overflow in the stack, allows a intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the tracking demon for GPS receivers, GPSd, is related to buffer overflow in the stack. Exploiting this vulnerability allows a hacker to access confidential data, compromise its integrity, and cause service failures...

EUVD-2022-38709

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2022-0852

CVE-2022-0852 concerns the convert2rhel utility, where a Red Hat account password is passed to subscription-manager via the command line. Connectors note that local attackers on a system with the affected convert2rhel can view the password in process command lines (e.g., via htop/ps), risking con...

OPENSUSE-SU-2022:10073-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 103.0.5060.134 boo1201679: CVE-2022-2477 : Use after free in Guest View CVE-2022-2478 : Use after free in PDF CVE-2022-2479 : Insufficient validation of untrusted input in File CVE-2022-2480 : Use after free in Service...

AZL-10387 CVE-2022-0670 affecting package ceph for versions less than 16.2.10-1

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of...

PT-2022-23371 · Atos · Atos Unify Openscape Branch +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape SBC versions 9 through 10 before 10R2.2.1 Atos Unify OpenScape Branch versions 9 through 10 before 10R2.1.1 Atos Unify OpenScape BCF version 10 before 10R9.12.1 Description: A remote code execution issue may allow an...