CVE-2022-27904

Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use TOCTOU race-condition attack during the agent install process...

CVE-2022-33021

CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30...

CVA6 缓冲区错误漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 that originates from accessing invalid memory when reading the value of MHPMCOUNTER30...

The vulnerability of the BSAP/IP protocol implementation of the telemechanics controller ControlWave and the Bristol Babcock 33xx controller allows a perpetrator to increase their privileges.

The vulnerability of the BSAP/IP protocol implementation of the telemechanics controller ControlWave and the Bristol Babcock 33xx controller is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to gain increase...

PT-2022-20612 · Unknown +3 · Dbus-Broker +3

Name of the Vulnerable Software and Affected Versions: dbus-broker versions prior to 31 Description: An issue was discovered in dbus-broker where multiple NULL pointer dereferences can occur when a malformed XML config file is supplied. Recommendations: For versions prior to 31, update to version...

PT-2022-20611 · Unknown +3 · C-Uitl/C-Shquote +4

Name of the Vulnerable Software and Affected Versions: dbus-broker versions prior to 31 Description: An issue was discovered in dbus-broker where it depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is...

CVE-2022-33739

creationtimestamp| type| source ---|---|--- 2022-06-17 02:21:55+00:00| seen| https://t.me/cibsecurity/44697...

CVE-2022-30153

creationtimestamp| type| source ---|---|--- 2022-06-16 02:26:58+00:00| seen| https://t.me/cibsecurity/44592...

AZL-9930 CVE-2022-32981 affecting package kernel for versions less than 5.15.55.1-1

An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER aka PEEKUSR and POKEUSR when accessing floating point registers...

CVE-2021-38221

creationtimestamp| type| source ---|---|--- 2022-06-02 22:25:55+00:00| seen| https://t.me/cibsecurity/43763...

CVE-2022-30512

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/paymenthistory.php:31...

mysql: InnoDB unspecified vulnerability (CPU Oct 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

BD Synapsys 代码问题漏洞

BD Synapsys is a software application from Biddy Medical BD that provides data management and workflow functionality in clinical diagnostic activities in laboratories. A code issue vulnerability exists in BD Synapsys versions 4.20, 4.20 SR1, and 4.30 that stems from insufficient session expiratio...

CVE-2022-31215

In certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan agent update operation. This allows remote attackers to bypass firewall blocking rules for a time period of up to 30 seconds. This affects Goverlan Reach Console before 10.5.1, Reach Server before 3.70.1,...

多款Goverlan产品安全漏洞

Goverlan Reach Console is a software-based, self-hosted IT remote support solution. Goverlan Reach Server is the central organization for all Goverlan services. Goverlan Reach Server is the central organization for all Goverlan services. Goverlan Client Agent is a secure, low footprint,...

GHSA-WJ5C-J656-H5FW Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

In Jenkins before versions 2.44 and 2.32.2, node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes SECURITY-343...

Vulnerability of the MIPS32 and MIPS64 square root calculation procedures in the OpenSSL library, which allows attackers to disclose sensitive information

The vulnerability of MIPS32 and MIPS64 square root extraction procedures in the OpenSSL library is related to the repeated use of secret keys. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

LiteSpeed QUIC 代码问题漏洞

LiteSpeed QUIC LSQUIC is an open source implementation of QUIC and HTTP/3 functionality for servers and clients from LiteSpeed USA. A security vulnerability exists in LiteSpeed QUIC versions prior to 31.0 that stems from liblsquic/lsquicqenchdl.c incorrectly handling MAXTABLECAPACITY...

mysql: InnoDB unspecified vulnerability (CPU Jul 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

DEBIAN-CVE-2022-24792

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs when reading WAV file data chunks with length...