GSD-2022-1006712 hwmon (occ): Retry for checksum failure

hwmon occ: Retry for checksum failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit d94cbc3725e95579ab1aceb51430151ef9805bef...

The vulnerability of the MTA email message checking module and the file checksum search module of the FortiSandbox threat detection and removal system allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the MTA email message checking module and the file checksum search module of the FortiSandbox threat detection and removal system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...

Huawei HarmonyOS HW_KEYMASTER module input validation error vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS version 2.0 is vulnerable to an input validation error that stems from a lack of checksum on read content in the HWKEYMASTER module. An attacker could...

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a lack of checksums on reads in the HWKEYMASTER module...

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer error vulnerability exists in Huawei HarmonyOS versions prior to 2.0, which stems from an out-of-bounds access vulnerability in the parameter set...

NETGEAR WPN824EXT 安全漏洞

The NETGEAR WPN824EXT is a WiFi Range Extender from NETGEAR. A security vulnerability exists in the NETGEAR WPN824EXT WiFi Range Extender version 1.1.11.1.9, which can be exploited by an attacker to introduce a backdoor to the device or cause the device to DoS via a MITM attack that modifies the...

CVE-2022-38538

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module...

Archery SQL注入漏洞

Archery is a set of open source vulnerability assessment and management tools. A security vulnerability exists in Archery versions v1.7.0 through v1.8.5, which stems from the checksum parameter in the report module containing a SQL injection vulnerability...

PT-2022-24444 · Archery · Archery

Name of the Vulnerable Software and Affected Versions: Archery versions 1.7.0 through 1.8.5 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the checksum parameter in the report module. Recommendations: For versions 1.7.0 through 1.8.5, a...

CVE-2022-38538

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module...

CVE-2022-38538

Archery v1.7.0–v1.8.5 contains a SQL injection vulnerability in the report module exposed via the checksum parameter. The issue affects versions 1.7.0 through 1.8.5; the underlying cause is a vulnerable handling of the checksum parameter in the report module (no further technical details provided...

CVE-2022-38538

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module...

Huawei HarmonyOS Elevation of Privilege Vulnerability (CNVD-2022-64985)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. An elevation of privilege vulnerability exists in Huawei HarmonyOS, which stems from insufficient checksum of the Location module privilege. An attacker could...

Huawei HarmonyOS 授权问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS has an authorization issue vulnerability that stems from insufficient checksum of WLAN module privileges, which could be exploited by an attacker to cau...

Huawei HarmonyOS 授权问题漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. An elevation of privilege vulnerability exists in Huawei HarmonyOS, which stems from insufficient checksum of the Location module privilege. An attacker could...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in FoFiTrueType::computeTableChecksumunsigned char, int in the file /xpdf/FoFiTrueType.cc...

CVE-2022-23442

An improper access control vulnerability CWE-284 in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands...

PT-2022-4744 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.2.0 through 6.2.11 FortiOS versions 6.4.0 through 6.4.8 FortiOS versions 7.0.0 through 7.0.5 Description: The issue is related to improper access control, allowing an authenticated attacker with a restricted user profile to...

GSD-2022-1004863 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.289 by commit...

GSD-2022-1004795 seg6: bpf: fix skb checksum in bpf_push_seg6_encap()

seg6: bpf: fix skb checksum in bpfpushseg6encap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.253 by commit...