NewStart CGSL CORE 5.05 / MAIN 5.05 : bind Vulnerability (NS-SA-2022-0041)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has bind packages installed that are affected by a vulnerability: - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND 9 Supported Preview Editio...

CVE-2022-28163

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands...

CVE-2022-28163

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands...

CVE-2022-28163

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands...

Sql injection

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands...

CVE-2022-28163: Improper Neutralization of Special Elements used in an SQL Command

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands...

PT-2022-18862

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.2.0 Description The issue allows an attacker to run arbitrary SQL commands due to SQL injection susceptibility in multiple endpoints associated with Zone management. Recommendations For versions prior to 2.2....

BSA-2022-1842

Security Advisory ID : BSA-2022-1842 Component : Zone Management Revision : 1.0 In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands. Affected Products. Brocade SANnav...

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

AngularJS 安全漏洞

AngularJS is an open source web application framework based on TypeScript. A security vulnerability exists in AngularJS version 1.7.0 and above, which stems from the fact that it provides a customized zone rule that can be used to assign a parameter in posPre, which can be exploited by an attacke...

Insecure IPv6 Connection

curl has insecure IPv6 connection. The vulnerability exists due to an errors in the logic where the config matching function did not take the IPv6 address zone id into account allowing the system to use the wrong connection when one transfer uses a zone id, and when subsequent transfer uses anoth...

CVE-2022-22275

Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service DoS attack if a target host is vulnerable...

CVE-2022-22275

Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service DoS attack if a target host is vulnerable...

Bad local IPv6 connection reuse

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse, if one of them matches the setup. Due to errors in the logic, the config matching function did not take the IPv6 address zone id into account which could lead to libcurl reusing the wrong connection...

UBUNTU-CVE-2022-27775

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead...

DEBIAN-CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

EulerOS 2.0 SP5 : ldns (EulerOS-SA-2022-1538)

According to the versions of the ldns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When ldns version 1.7.1 verifies a zone file, the ldnsrrnewfrmstrinternal function has a heap out of bounds read vulnerability. An attacker can lea...

EulerOS 2.0 SP8 : ldns (EulerOS-SA-2022-1572)

According to the versions of the ldns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When a zone file in ldns 1.7.1 is parsed, the function ldnsnsec3saltdata is too trusted for the length value obtained from the zone file. When the...

PT-2022-30644

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to the creation of ZONE MOVABLE beyond the end of a node in mm/pages alloc.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-29279

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the btrfs zoned mode, where devices are traversed under chunk mutex in the btrfs can activate zone function. The actual impact and attack plausibility have not yet been...