GSD-2022-1003106 net/mlx5: fs, delete the FTE when there are no rules attached to it

net/mlx5: fs, delete the FTE when there are no rules attached to it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

StarWind SAN & NAS 安全漏洞

StarWind SAN & NAS is a standalone hypervisor server or group of servers for StarWind. A security vulnerability exists in StarWind SAN & NAS v0.2 build 1914, which can be exploited by an attacker to cause remote code execution...

Mozilla: Incorrect security status shown after viewing an attached email

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and...

UBUNTU-CVE-2022-1520

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A...

Mozilla: Incorrect security status shown after viewing an attached email

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and...

Mozilla: Incorrect security status shown after viewing an attached email

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and...

Mozilla: Incorrect security status shown after viewing an attached email

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and...

Mozilla: Incorrect security status shown after viewing an attached email

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and...

GHSA-JWFR-H6JP-9P2G Jenkins allows attackers to obtain the master cryptographic key

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

CVE-2022-24372

Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share...

Linksys MR9600 后置链接漏洞

Linksys MR9600 is a wireless router from Linksys, Inc. A security vulnerability exists in Linksys MR9600 devices prior to version 2.0.5, which can be exploited by attackers to read arbitrary files via a symbolic link to the root of a NAS SMB share...

TerraMaster FS-210信任管理问题漏洞

The Terramaster TerraMaster FS-210 is a NAS Network Attached Storage device from Shenzhen, China-based Terramaster Electronics Technology Terramaster. A security vulnerability exists in Terramaster F4-210, F2-210 TOS version 4.2.X 4.2.15-2107141517, which can be exploited to allow an attacker to...

QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution...

Exploit for Out-of-bounds Write in Adobe Acrobat

CVE-2021-21017 Not another Adobe Reader Byte Order Mark bu...

VulnCheck KEV: CVE-2018-14839

LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability...

Zyxel Multiple NAS Devices OS Command Injection Vulnerability

Multiple Zyxel network-attached storage NAS devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code...

Kazoo Server 授权问题漏洞

Qnap Kazoo Server is a server from China's Weilian Technology Qnap. An authorization issue vulnerability exists in Kazoo Server because Qnap Nas running on the product does not validate the user's identity. The vulnerability can be exploited by an attacker to compromise the security of the system...

CVE-2022-21805

Reflected cross-site scripting vulnerability in the attached file name of phpmailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-21805: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting vulnerability in the attached file name of phpmailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors...

PT-2022-15142

Name of the Vulnerable Software and Affected Versions php mailform versions prior to 1.40 Description A reflected cross-site scripting issue in the attached file name allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations For versions prior...