6 matches found
EUVD-2022-24683
Malicious code in bioql PyPI...
EUVD-2022-24677
Malicious code in bioql PyPI...
EUVD-2022-24681
Malicious code in bioql PyPI...
EUVD-2022-24678
Malicious code in bioql PyPI...
CVE-2022-1359 Cambium Networks cnMaestro Path Traversal
The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters ../ as part of a filename, the server will save the file where the attacker...
CVE-2022-1356 Cambium Networks cnMaestro use of Potentially Dangerous Function
cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands...