1501 matches found
CVE-2022-1798 Path Traversal vulnerability in Kubevirt
A path traversal vulnerability in KubeVirt versions up to 0.56 and 0.55.1 on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. /proc/self/ is not accessible...
CVE-2022-1798
CVE-2022-1798 is a path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1). A user who can configure kubevirt can read arbitrary host files that are publicly readable or readable for UID 107 or GID 107; note that /proc/self/ is not accessible. Impact is high for confidentiality,...
KubeVirt vulnerable to arbitrary file read on host
As part of a Kubevirt audit performed by NCC group, a finding dealing with systemic lack of path sanitization which leads to a path traversal was identified. Google tested the exploitability of the paths in the audit report and identified that when combined with another vulnerability one of the...
CVE-2022-36850
Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid...
CVE-2022-36850
Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid...
CVE-2022-36850
Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid...
CVE-2022-38564
Tenda M3 V1.0.0.124856 was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to cause a Denial of Service DoS via the adItemUID parameter...
CVE-2021-3995
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of...
Design/Logic Flaw
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of...
CVE-2022-20246
In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Design/Logic Flaw
In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2022-20246
In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
SUSE-SU-2022:2788-1 Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2020-35512: Fixed a memory safety issue which affected systems with users with the same numeric UID bsc1187105...
PT-2022-14468 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege...
EulerOS Virtualization 2.10.0 : util-linux (EulerOS-SA-2022-2041)
According to the versions of the util-linux package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
The popular protocol for radio controlled RC aircraft called ExpressLRS can be hacked in only a few steps, according to a bulletin published last week. ExpressLRS is an open-source long range radio link for RC applications, such as first-person view FPV drones. “Designed to be the best FPV Racing...
Malicious code in @msmg/vue-uid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553b2404d6773b7d0f3548c2b1a5dd2dac7349a45d2cf9e3b6e1ec8a770a112a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-442 Malicious code in @msmg/vue-uid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553b2404d6773b7d0f3548c2b1a5dd2dac7349a45d2cf9e3b6e1ec8a770a112a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
LinkedIn: IDOR - Delete technical skill assessment result & Gained Badges result of any user
The web app is vulnerable to IDOR at DELETE /voyager/api/voyagerAssessmentsDashSkillAssessmentAttemptReports/urn%3Ali%3AfsdskillAssessmentAttemptReport%3Aurn%3Ali%3Afsdprofile%███%2Curn%3Ali%3Askill%3A280%2C1 HTTP request. Allows an attacker to delete the skill assessment result of any user's...
