1023 matches found
PT-2022-26355 · Veritas · Veritas Netbackup
Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0.0.1 Veritas related products affected versions not specified Description: An issue was discovered that can cause the NetBackup Primary server nbars process to crash, resulting in a denial of service. T...
GSD-2022-1005568 watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource
watchdog: sp5100tco: Fix a memory leak of EFCH MMIO resource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...
GSD-2022-1005211 watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource
watchdog: sp5100tco: Fix a memory leak of EFCH MMIO resource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
GSD-2022-1005075 powerpc/watchdog: introduce a NMI watchdog's factor
powerpc/watchdog: introduce a NMI watchdog's factor This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...
GSD-2022-1005074 powerpc/pseries/mobility: set NMI watchdog factor during an LPM
powerpc/pseries/mobility: set NMI watchdog factor during an LPM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...
CVE-2022-38611
Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...
CVE-2022-38611
Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...
CVE-2022-38611
Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...
Improper access control
Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...
CVE-2022-38611
Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...
CVE-2022-38611
The CVE-2022-38611 entry concerns Watchdog Anti-Virus v1.4.158 where a flaw in incorrect access control enables a DLL hijacking attack, allowing arbitrary code execution. The vulnerability is characterized as a local, low-complexity issue requiring user interaction (per CVSS: LOCAL/LOW complexity...
Watchdog Anti-Virus Release Notes 安全漏洞
Watchdog Anti-Virus Release Notes is an anti-virus program from Watchdog. A security vulnerability exists in Watchdog Anti-Virus Release Notes v1.4.158, which originates from incorrect access control and can be exploited by attackers to perform DLL hijacking attacks and execute arbitrary code via...
PT-2022-33332 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.19.4 Description: The issue is related to the powerpc/pseries/mobility module in the Linux Kernel, specifically with setting the NMI watchdog factor during an LPM. The actual impact and attack plausibility hav...
PT-2022-33469 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: A memory leak issue was discovered in the sp5100 tco watchdog of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck loop indefinitely until...
Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware
A .NET-based evasive crypter named DarkTortilla has been used by threat actors to distribute a broad array of commodity malware as well as targeted payloads like Cobalt Strike and Metasploit, likely since 2015. "It can also deliver 'add-on packages' such as additional malicious payloads, benign...
CVE-2022-34537
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a cross-site scripting XSS vulnerability via the component biaoneshot.cgi...
CVE-2022-34536
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows attackers to access the core log file and perform session hijacking via a crafted session token...
CVE-2022-34540
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/licensetok.cgi. This vulnerability is exploitable via a crafted POST request...