CVE-2022-40602

A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00ABLG.6C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator...

CVE-2022-40602: Improper Authentication

A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00ABLG.6C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator...

Twisted vulnerable to NameVirtualHost Host header injection

When the host header does not match a configured host, twisted.web.vhost.NameVirtualHost will return a NoResource resource which renders the Host header unescaped into the 404 response allowing HTML and script injection. Example configuration: python from twisted.web.server import Site from...

CVE-2022-43421

A missing permission check in Jenkins Tuleap Git Branch Source Plugin 3.2.4 and earlier allows unauthenticated attackers to trigger Tuleap projects whose configured repository matches the attacker-specified value...

CVE-2022-23241

Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retention period...

Cisco Secure Web Appliance Input Validation Error Vulnerability

Cisco Secure Web Appliance is an application from Cisco, Inc. The Cisco Secure Web Appliance is vulnerable to an input validation error that stems from its failure to properly detect malformed encoded traffic, which could be exploited by an unauthenticated, remote attacker to bypass configured...

CVE-2021-4178

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML...

CVE-2022-24020

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

Transposh WordPress Translation 1.0.7 Incorrect Authorization Vulnerability

Transposh WordPress Translation versions 1.0.7 and below suffer from an incorrect authorization vulnerability. When installed, Transposh comes with a set of pre-configured options, one of these is the "Who can translate" setting under the "Settings" tab, which by default allows "Anonymous" users ...

CVE-2022-2458

An XML external entity injectionXXE vulnerability was found in Business Central. This flaw allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. T...

PT-2022-32186

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.146 through 4.19.246 Description A potential double free issue was identified in the elan input configured function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32068

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.66 through 5.4.197 Description A potential double free issue was identified in the elan input configured function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31900

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential double free issue was identified in the elan input configured function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2022-31403

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential double free issue was identified in the elan input configured function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5...

PT-2022-31063

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential double free issue was identified in the elan input configured function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5....

PT-2022-31696

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential double free issue was identified in the elan input configured function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5...

Bolt Cross-site Scripting (XSS) via text input click preview button

Bolt CMS 3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry...

Jenkins z/OS Connector Plugin allows local attacker to retrieve configured password

A exposure of sensitive information vulnerability exists in Jenkins z/OS Connector Plugin 1.2.6.1 and earlier in SCLMSCM.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser e.g. malicious extension to retrieve the configured password. IBM...