D-BUS 数据伪造问题漏洞

D-BUS is a message bus system, which is mainly used for inter-process communication and remote procedure calls. A security vulnerability exists in D-BUS versions prior to 1.12.24-0+deb11u1, which stems from the inclusion of multiple vulnerabilities in D-Bus that can be exploited by an attacker to...

Debian DSA-5250-1 : dbus - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5250 advisory. - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and...

D-BUS 输入验证错误漏洞

D-BUS is a message bus system, which is mainly used for inter-process communication and remote procedure calls. A security vulnerability exists in D-BUS versions prior to 1.12.24-0+deb11u1, which stems from the inclusion of multiple vulnerabilities in D-Bus that can be exploited by an attacker to...

PT-2022-5137 · D-Bus +10 · D-Bus +10

Name of the Vulnerable Software and Affected Versions: D-Bus versions 1.12.24 and earlier, 1.13.x, 1.14.x before 1.14.4, and 1.15.x before 1.15.2 Description: An issue was discovered in D-Bus where an authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when...

CVE-2022-35155

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

Sql injection

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

CVE-2022-35155

CVE-2022-35155 concerns the Bus Pass Management System v1.0, where a reflected cross-site scripting (XSS) vulnerability exists in the searchdata parameter. Multiple connected sources confirm the issue: the vulnerability is triggered via user-supplied input echoed into HTML in the response (notabl...

CVE-2022-35155

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

CVE-2022-35156

CVE-2022-35156 affects Bus Pass Management System 1.0. Multiple sources identify a SQL Injection vulnerability reachable via the searchdata parameter at /buspassms/download-pass.php, with CVSS 3.1 base metrics up to 9.8 (CRITICAL) and impact on confidentiality, integrity, and availability. Affect...

AZL-11080 CVE-2022-41849 affecting package kernel for versions less than 5.15.82.1-1

drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open, aka a race condition between ufxopsopen and ufxusbdisconnect...

UBUNTU-CVE-2022-41849

drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open, aka a race condition between ufxopsopen and ufxusbdisconnect...

PT-2022-22606

Name of the Vulnerable Software and Affected Versions Bus Pass Management System version 1.0 Description A SQL Injection issue was found in the Bus Pass Management System. The vulnerability can be exploited via the searchdata parameter at the "/buspassms/download-pass.php" API endpoint...

Bus Pass Management System 跨站脚本漏洞

Bus Pass Management System is a bus pass management system. A cross-site scripting vulnerability exists in Bus Pass Management System v1.0, which was discovered to contain a cross-site scripting XSS vulnerability via the searchdata parameter...

Bus Pass Management System SQL注入漏洞

Bus Pass Management System is a bus pass management system. Bus Pass Management System v1.0 has a SQL injection vulnerability, which stems from an SQL injection vulnerability found to be contained in the searchdata parameter...

PT-2022-22605

Name of the Vulnerable Software and Affected Versions Bus Pass Management System version 1.0 Description The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the searchdata parameter. Recommendations For Bus Pass Management System version 1.0, ...

Security Bulletin: IBM App Connect Enterprise & IBM Integration Bus are vulnerable to a denial of service due to zlib (CVE-2018-25032)

Summary IBM App Connect Enterprise & IBM Integration Bus are vulnerable to a denial of service due to zlib. The fix includes zlib 1.2.12. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service, caused by a memory corruption in the deflate operation. By...