13563 matches found
CVE-2022-43752
Oracle Solaris version 10 1/13, when using the Common Desktop Environment CDE, is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon...
Privilege escalation
UNSUPPORTED WHEN ASSIGNED Oracle Solaris version 10 1/13, when using the Common Desktop Environment CDE, is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon...
e-Excellence U-Office Force 路径遍历漏洞
e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. U-Office Force suffers from a path traversal vulnerability, which arises from its download feature that allows a remote attacker with common privileges to traverse the path and download arbitrary...
PT-2022-6223 · Oracle · Common Desktop Environment +1
Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 10 1/13 Description: The issue is a privilege escalation vulnerability that can be exploited by a low-privileged user to gain root access. This is achieved by crafting a malicious printer and double-clicking on the...
CVE-2022-43752
Oracle Solaris version 10 1/13, when using the Common Desktop Environment CDE, is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon...
CVE-2022-43752
Oracle Solaris version 10 1/13, when using the Common Desktop Environment CDE, is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon...
Oracle Solaris 安全漏洞
Oracle Solaris, a UNIX operating system from Oracle Corporation, has a security vulnerability in Oracle Solaris versions 10 1/13 that stems from a vulnerability to privilege escalation when using the Common Desktop Environment CDE. An attacker with low privileges can escalate to root by creating ...
CVE-2022-44019
In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter...
PT-2022-27081 · Total.Js · Total.Js
Name of the Vulnerable Software and Affected Versions: Total.js versions prior to 0e5ace7 Description: The issue allows remote command execution via shell metacharacters in the host parameter of the "/api/common/ping" API endpoint. Recommendations: For versions prior to 0e5ace7, update to a versi...
CVE-2021-38731
creationtimestamp| type| source ---|---|--- 2022-10-28 20:29:38+00:00| seen| https://t.me/cibsecurity/52226...
DL1 bug fix and enhancement update
An update is available for ipa, python-jwcrypto, custodia, bind-dyndb-ldap, python-qrcode, softhsm, slapi-nis, python-yubico, python-kdcproxy, opendnssec, ipa-healthcheck, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
ansible-freeipa bug fix and enhancement update
An update is available for ansible-freeipa. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ansible-freeipa package provides Ansible roles and playbooks to...
container-tools:rhel8 bug fix and enhancement update
An update is available for fuse-overlayfs, container-selinux, udica, containers-common, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, python-podman, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common...
cockpit bug fix and enhancement update
An update is available for cockpit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit enables users to administer GNU/Linux servers using a web browser. It...
Malicious code in tttestsupport-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec247ef9b86fec7b8f1a1487f90871675bf61efd5c6483db68965ad27692f119 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6677 Malicious code in tttestsupport-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec247ef9b86fec7b8f1a1487f90871675bf61efd5c6483db68965ad27692f119 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
firefox security update
An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
Security Bulletin: The IBM® Engineering Lifecycle Management products recommendation for IBM Java XML vulnerability CVE-2022-21299
Summary A flaw in the XML component allows attackers to inflict a denial-of-service and/or access external entities which should be inaccessible. Vulnerability is identified in Java versions 7.0.11.5 and earlier, 7.1.5.5 and earlier, 8.0.7.5 and earlier. Vulnerability Details Refer to the securit...
CVE-2022-41806
creationtimestamp| type| source ---|---|--- 2022-10-20 02:20:47+00:00| seen| https://t.me/cibsecurity/51846 2025-05-08 19:24:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15601...
The vulnerability of the configuration panel of the device information collection tool for Cisco Common Services Platform Collector allows a perpetrator to execute arbitrary code.
The vulnerability of the configuration panel of the Cisco Common Services Platform Collector for collecting device information exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to...