CVE-2023-22315

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network LAN protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code...

SUSE: Security Advisory (SUSE-SU-2023:0136-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-33643 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue introduces active flags to prevent Use After Free UAF when an applicant is uninitialized. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-34257 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.11 through v5.15.85 Description: A memory leak issue was discovered in the power state initialization of the AMDGPU powerplay PSM. The actual impact and attack plausibility have not yet been proven. This issue was...

PT-2023-34159 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A memory leak issue was discovered in the test firmware init function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.14 and is...

PT-2022-27869 · Tp Link · Tp-Link Tl-Wr1043Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR1043ND V1 versions 3.13.15 and earlier Description: The issue allows authenticated attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image during the firmware update process...

CVE-2022-41115

Microsoft Edge Chromium-based Update Elevation of Privilege Vulnerability...

CVE-2022-41115

Microsoft Edge Chromium-based Update Elevation of Privilege Vulnerability...

Debian dla-3238 : pngcheck - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3238 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3238-1 [email protected] https://www.debian.org/lts/security/...

PT-2022-36426 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: The issue concerns a NULL pointer dereference in the can rx register function. This problem was introduced in version v5.4.110 and is fixed in version v5.4.225. The actual impact and attack...

PT-2022-36537 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.9 through 4.14.299 Description: The issue is related to an infoleak in the vmci host do receive datagram function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

Simple:Press < 6.8.1 - Admin+ Arbitrary File Update

The plugin does not validate files to be updated, which could allow high privilege users such as admin to update arbitrary files and not just the one allowed by the plugin...

MGASA-2022-0432 Updated php-pear-CAS packages fix security vulnerability

This update fixes a vulnerability in this lib. For details see refererenced github advisory...

DSA-5271-1 libxml2 - security update

Bulletin has no description...

CVE-2022-34845

A firmware update vulnerability exists in the sysupgrade functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network packet can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability...

The vulnerability of Avira Security’s update function allows attackers to enhance their privileges.

The vulnerability of Avira Security’s update function is related to the possibility of downloading arbitrary files. Exploiting this vulnerability can allow a hacker to increase their privileges...

SUSE-SU-2022:3511-2 Security update for python3

This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // bsc1202624...

RHEL 9 : thunderbird (RHSA-2022:7026)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:7026 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.3.0. Security Fixes: expat: a...

CVE-2022-42142

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/updatesettings.php...

The vulnerability of the software update function of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to load any file onto a vulnerable device.

The vulnerability of the Cisco Enterprise NFV Infrastructure Software’s software update function NFVIS is related to errors during file signature verification. Exploiting this vulnerability could allow a attacker to load any file onto a vulnerable device...