SUSE CVE-2018-16858

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script i...

Contec SolarView Compact 命令注入漏洞

Contec SolarView Compact is an application system from Contec Japan. It provides photovoltaic power generation measurement system. A security vulnerability exists in Contec SolarView Compact version 6.00 and earlier versions. An attacker can exploit the vulnerability to execute commands via...

CVE-2022-30544

Cross-Site Request Forgery CSRF in MiKa's OSM – OpenStreetMap plugin = 6.0.1 versions...

PT-2023-33546 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.17 Description: A potential issue exists in the fs/ntfs3 component, specifically in the ntfs read mft function, where a duplicate condition is deleted. The actual impact and attack plausibility of this issue...

PT-2023-33172 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: A potential issue has been identified in the Linux Kernel, related to a possible use after free in e100 xmit prepare. The actual impact and attack plausibility have not yet been proven...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

PT-2022-35079 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to memory corruption when recording errors during writeback in the iomap component. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-34898 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue is related to the addition of atomic check to bridge ops in the drm/msm/dp module. It was introduced in version v5.17 and fixed in version v6.0.7. The actual impact and attack...

PT-2022-34915 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue is related to memory corruption with too many bridges in the drm/msm/hdmi component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-35173 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns an error in the length of the VALIDATE NEGOTIATE INFO message in the cifs component. It was introduced in version v5.0 and fixed in version v6.0.3. The actual impact and...

PT-2022-35041 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns an integer overflow when loading firmware, specifically affecting the crypto component related to Cavium. This problem was introduced in version v4.11 and is resolved in...

PT-2022-35088 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the drm/msm/dpu component, specifically with the indexing of dpu kms-hw vbif using vbif idx. This is a potential security vulnerability, although its actual impact and...

PT-2022-34957 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.6 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically with the ahci module. The actual impact and attack plausibility have not yet been proven...

PT-2022-35164 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential security issue has been identified in the Linux Kernel, related to the cpuinfo module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Issue -...

CVE-2022-36834

Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with user interaction...

CVE-2022-22482

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977...

CVE-2022-29298

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

CVE-2022-24643

A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...

Tibco Ebx 跨站脚本漏洞

Tibco Ebx is a software from Tibco India that supports integration to manage enterprise data assets. A cross-site scripting vulnerability exists in TIBCO EBX, which can be exploited by an attacker to perform cross-site scripting attacks. Affected versions include TIBCO Software Inc.'s TIBCO EBX:...