CVE-2022-25462

Yafu v2.0 contains a segmentation fault via the component /factor/avx-ecm/vecarith52.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

Jenkins incapptic connect uploader Plugin has an unspecified vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins incapptic connect uploader Plug...

Jenkins Kubernetes Continuous Deploy Plugin has an unspecified vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. The vulnerability can be exploited by an attacker with Overall/Read privilege...

CuppaCMS has an unspecified vulnerability

CuppaCMS is a content management system CMS. a security vulnerability exists in CuppaCMS version 1.0, which stems from the fact that CuppaCMS reads arbitrary files via the copy function. No details of the vulnerability are currently available...

Security Bulletin: A security vulnerability in golang affects IBM Cloud Automation Manager

Summary A security vulnerability in golang affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2022-23772 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a buffer overflow in the Rat.SetString function in math/big. By sending a specially-crafted request, ...

CVE-2021-44215

Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact...

CVE-2021-44215

Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact...

CVE-2021-32436

An out-of-bounds read in the function writetitle in subs.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service DoS via unspecified vectors...

Northern.tech CFEngine 安全漏洞

Northern.tech CFEngine is an IT infrastructure configuration management and automation framework. A security vulnerability exists in Northern.tech CFEngine Enterprise versions prior to 3.15.4 3.15.5 that allows unauthorized local users to have an unspecified impact...

PT-2022-14300 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: ims service affected versions not specified Description: The issue is related to a missing permission check in the ims service, which could lead to a local escalation of privilege. No additional execution privileges are needed for exploitatio...

PT-2022-10992 · Google +2 · Android Kernel +2

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2022-1838 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Cloud Files Mini Filter Driver, which can be exploited to elevate privileges. This...

PT-2022-1885 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

PT-2022-1983 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Print Spooler of the Microsoft Windows operating system. It allows a remote attacker to bypass security...

PT-2022-1860 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to insufficient access control in the Windows Ancillary Function Driver for WinSock, which can be exploited to elevate privileges...

PT-2022-1881 · Microsoft · Windows Nt Lan Manager Datagram Receiver Driver +1

Name of the Vulnerable Software and Affected Versions: Windows NT Lan Manager Datagram Receiver Driver affected versions not specified Description: The issue is related to information disclosure in the NT Lan Manager Datagram Receiver Driver of the Microsoft Windows operating system. It allows an...

PT-2022-4531 · Xen +5 · Xen +5

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Xen hypervisor's paravirtualization PV mode implementation. This can be exploited to cause a denial of service...

Code injection

A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic Connect version 1.40.0, 1.39.1, 1.39.0, 1.38.1, 1.38.0, 1.37.1, 1.37.0, 1.36.0, 1.35.5, 1.35.4 and 1.35.3...

Twisted has unspecified vulnerabilities

Twisted is an event-driven open source network engine written in Python. Twisted has security vulnerabilities, and no details of the vulnerabilities are currently available...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2022-1285)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...