EUVD-2022-32626

Malicious code in bioql PyPI...

DEBIAN-CVE-2022-49526

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: don't set sb values if can't pass sanity check If bitmap area contains invalid data, kernel will crash then mdadm triggers "Segmentation fault". This is cluster-md speical bug. In non-clustered env, mdadm will handle...

CVE-2023-28808

CVE-2023-28808 affects Hikvision Hybrid SAN/Cluster Storage products. A network-access vulnerability in the access control allows an attacker to obtain admin permissions by sending crafted messages to affected devices. The NVD metrics show a critical impact with CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/...

CVE-2022-28172

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device...

CVE-2022-28171

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device...

CVE-2022-28171

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device...

Hikvision Hybrid SAN/Cluster Storage 命令注入漏洞

Hikvision Hybrid SAN/Cluster Storage Products is a line of cost-effective and reliable hybrid SAN Storage Area Network products from Hikvision, a China-based company. A security vulnerability exists in Hikvision Hybrid SAN/Cluster Storage that stems from insufficient input validation in the web...

Tendrl API Session Hijacking Vulnerability

The Tendrl APIs are a set of APIs that provide installation, storage configuration, lifecycle management, monitoring and alerting capabilities for Ceph and Cluster storage. A session hijacking vulnerability exists in the Tendrl API. An attacker could exploit this vulnerability to gain access to...