CVE-2023-22815 Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices

Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on vulnerable CGI files. This vulnerability can only be exploited over the network and the attacker must already have...

golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags

A vulnerability was found in the golang.org/x/text/language package. An attacker can craft an Accept-Language header which ParseAcceptLanguage will take significant time to parse. This issue leads to a denial of service, and can impact availability...

Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester

Summary There are multiple vulnerabilities in Open JDK Version 8, OpenJ9 used by Rational Functional Tester RFT. RFT has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-21968 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and GraalVM Enterprise Edition related to...

CVE-2023-34159

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality...

CVE-2023-34155

Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability...

CVE-2023-34159

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality...

CVE-2022-48490

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48499

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48490

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48497

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48500

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48486

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48486

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48499

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48487

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48492

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48489

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48493

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48489

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48487

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...