CVE-2022-32430

Lin CMS Spring Boot v0.2.1 has an access control flaw that allows unauthenticated attackers to access backend information and functions. The nuclei template and Red Hat/GHSA entries describe a hardcoded/default JWT token scenario enabling unauthorized access, potentially compromising backend admi...

PT-2022-21318 · Unknown · Lin-Cms Springboot

Name of the Vulnerable Software and Affected Versions: Lin CMS Spring Boot version 0.2.1 Description: An access control issue allows attackers to access the backend information and functions within the application. Recommendations: For Lin CMS Spring Boot version 0.2.1, consider restricting acces...

Lin CMS Spring Boot 安全漏洞

Lin CMS Spring Boot is a SpringBoot-based CMS/DMS/Management System development framework from the team at TaleLin. A security vulnerability exists in Lin CMS Spring Boot version v0.2.1, which can be exploited by an attacker to access back-end information and functionality within an application...

HP PC UEFI Secure Boot Database Update July 2022

Potential vulnerabilities have been identified in certain UEFI applications signed by HP which may allow local arbitrary code execution. HP is providing a standalone Secure Boot Update Utility SBUU for identified HP PC products to update the secure boot database so that these vulnerable UEFI...

DEBIAN-CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

Heap overflow

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

UBUNTU-CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

Spring Tips: Kubernetes Native Java (Redux, 2022)

Hi, Spring fans! In this installment, Josh Long @starbuxman looks at some of the amazing opportunities for building Spring Boot applications intended for production in Kubernetes in mid 2022. The code, as usual, is available on the spring-tips Github organization...

CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

CVE-2022-33967

CVE-2022-33967 affects the squashfs filesystem implementation in U-Boot, from versions v2020.10-rc2 through v2022.07-rc5. The root cause is a defect in the metadata reading process, causing a heap-based buffer overflow. Consequences stated in sources include denial-of-service (DoS) or arbitrary c...

CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...

The vulnerability of the UEFI loader of the Boot Manager of the Windows operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the UEFI loader of the Windows operating system’s Boot Manager is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions...

CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

UBUNTU-CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

PT-2022-4442 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's IMA appraisal feature, which can be used to bypass lockdown mechanisms when Secure Boot is disabled or unavailable. This can be achieved by...

SUSE: Security Advisory (SUSE-SU-2022:2414-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...