13570 matches found
KLA19245 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...
VulnCheck KEV: CVE-2022-37969
Microsoft Windows Common Log File System CLFS driver contains an unspecified vulnerability that allows for privilege escalation...
PT-2022-5571 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory in the Windows Common Log File System Driver, which can allow an attacker to execute arbitrary code with system privileges. It is a...
Microsoft Windows Common Log File System Driver 安全漏洞
The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...
flatpak bug fix and enhancement update
An update is available for mozilla-filesystem, sbc, dbus-glib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list These packages will be released only via the firef...
CVE-2022-34110
creationtimestamp| type| source ---|---|--- 2022-09-12 07:23:29+00:00| seen| https://t.me/cibsecurity/49581...
Malicious code in troy-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa7b7e93170b23a3db32c4befa01c8c7042f92359e4c4fd2e156981a34ceb968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6655 Malicious code in troy-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa7b7e93170b23a3db32c4befa01c8c7042f92359e4c4fd2e156981a34ceb968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-40133
creationtimestamp| type| source ---|---|--- 2022-09-09 18:32:25+00:00| seen| https://t.me/cibsecurity/49525 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
SUSE: Security Advisory (SUSE-SU-2022:3178-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious Package
Overview ambire-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
Malicious Package
Overview nlu-devops-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
AZL-43348 CVE-2021-43565 affecting package libcontainers-common for versions less than 20210626-5
The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...
CVE-2022-35931 Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator
Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior to versions 22.2.10, 23.0.7, and 24.0.3 the random password generator may, in very rare cases, generate common passwords that the validator itself would block. Upgrade Nextcloud...
PT-2022-23037 · Nextcloud · Nextcloud Password Policy
Name of the Vulnerable Software and Affected Versions: Nextcloud Password Policy versions prior to 22.2.10 Nextcloud Password Policy versions prior to 23.0.7 Nextcloud Password Policy versions prior to 24.0.3 Description: The random password generator in Nextcloud Password Policy may, in very rar...
Buffer overflow
PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parsesequenceheader at source/common/header.cc:269...
CVE-2022-36647
CVE-2022-36647 affects PKUVCL davs2 v1.6.205. The vulnerability is a global buffer overflow in the parse_sequence_header() function (source/common/header.cc:269). Per the CVE entry, this can lead to an availability impact (buffer overflow) with a local attack vector and user interaction required;...
CVE-2022-36647
Removed by vendor...