SUSE CVE-2005-0004

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files...

SUSE CVE-2019-2818

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

SUSE CVE-2020-14058

An issue was discovered in Squid before 4.12 and 5.x before 5.0.3. Due to use of a potentially dangerous function, Squid and the default certificate validation helper are vulnerable to a Denial of Service when opening a TLS connection to an attacker-controlled server for HTTPS. This occurs becaus...

IBM Sterling Secure Proxy 跨站脚本漏洞

IBM Sterling Secure Proxy is an application proxy from International Business Machines IBM that is used to ensure the secure transfer of files in an organization's unprotected zone DMZ. A cross-site scripting vulnerability exists in IBM Sterling Secure Proxy version 6.0.3 that stems from improper...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. A buffer overflow vulnerability exists in XPDF version 4.03. An attacker could exploit this vulnerability to cause the application to crash via a speciall...

Johnson Controls Metasys ADS/ADX/OAS 安全漏洞

Johnson Controls Metasys ADS/ADX/OAS Servers is an application and data server from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls Metasys ADS/ADX/OAS version 10 up to and including 10.1.6, and version 11 up to and including 11.0.3, which stems from insufficient...

PT-2023-15898

Name of the Vulnerable Software and Affected Versions sviehb jefferson versions up to 0.3 Description A critical vulnerability has been found in the sviehb/jefferson JFFS2 filesystem extraction tool, affecting unknown code of the file src/scripts/jefferson. The manipulation leads to path traversa...

CVE-2022-4103

creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:21+00:00| seen| https://t.me/cibsecurity/56204...

Symbiote Seed 输入验证错误漏洞

Symbiote Seed is a set of modules that provide a solid foundation for building SilverStripe websites. An input validation error vulnerability exists in Symbiote Seed versions prior to 6.0.3, which stems from a problem with the onBeforeSecurityLogin function in the...

CVE-2022-20503

creationtimestamp| type| source ---|---|--- 2022-12-16 18:37:40+00:00| seen| https://t.me/cibsecurity/54739...

CVE-2022-3858

CVE-2022-3858 affects the WordPress plugin Chaty / Floating Chat Widget prior to version 3.0.3. The issue is an SQL injection caused by improper sanitisation/escaping of a parameter before it is used in a SQL statement, making it exploitable by users with a role as low as admin. Documented impact...

PT-2022-26948 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 6.0.3 Description: A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script. The developer provides new patched releases for all versions since 3.7. Recommendations: For...

PT-2022-35116 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a potential underflow in the wfx send pds function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-35079 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to memory corruption when recording errors during writeback in the iomap component. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-34986 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: The issue is related to RDMA/rxe, where delete error messages are triggered by incoming Read requests. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-35045 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v6.0.2 Description: A potential security issue exists due to a mismatch in get/set sgl sge nr. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35084 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.7 through v6.0.2 Description: A refcount leak bug was discovered in the of get ddr timings function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.7 and...

PT-2022-35145 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a fix for a sanity check on destination blkaddr during recovery in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-35123 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a send buffer overflow in NFSv2 READDIR. It was introduced in version v5.16 and is fixed in Linux Kernel version v6.0.3. The actual impact and attack plausibility have not...

PT-2022-35041 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns an integer overflow when loading firmware, specifically affecting the crypto component related to Cavium. This problem was introduced in version v4.11 and is resolved in...