PT-2023-15669 · Unknown · Phone-Pc Collaboration Module

Name of the Vulnerable Software and Affected Versions: phone-PC collaboration module affected versions not specified Description: The issue is related to a logic bypass vulnerability in the phone-PC collaboration module. Successful exploitation of this vulnerability may affect data confidentialit...

CVE-2022-48290

The CVE-2022-48290 entry concerns Huawei/HarmonyOS: a logic bypass vulnerability in the phone-PC collaboration module (Multi‑Screen Collaboration). Affected software is HarmonyOS with the collaboration module as the implicated component. The root cause is described as a logic bypass, with potenti...

CVE-2022-48287

The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity...

CVE-2022-48290

The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity...

Huawei HarmonyO SHwContacts module logic bypass vulnerability

Huawei HarmonyOS is an operating system from Huawei China. Huawei HarmonyO SHwContacts module is vulnerable to a logical bypass vulnerability that could be exploited by attackers to compromise data integrity...

EulerOS 2.0 SP8 : rpm (EulerOS-SA-2023-1335)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a 'binding signature.' RPM does not check t...

samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided

A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2022 - Includes Oracle October 2022 CPU

Summary IBM Copy Services Manager is vulnerable to data integrity threats CVE-2022-21619, CVE-2022-21624 and partial DOS CVE-2022-21628, CVE-2022-21626 due to the use of IBM Java. IBM Java is used by CSM to provide a product code platform, and runtime environment. This issue was disclosed as part...

Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to bypassing security restrictions, denial of service attacks, and data integrity impacts due to multiple vulnerabilities.

Summary IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i are vulnerable to bypassing security restrictions, denial of service attacks, and allowing an unauthenticated attacker to modify data as seen in the vulnerability details section CVE-2022-3676,...

The vulnerability of the smoothscroll function in Vim text editors allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smoothscroll function in Vim text editors relates to a division by zero when the window size is small. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. Huawei HarmonyO SHwContacts module is vulnerable to a logical bypass vulnerability that could be exploited by attackers to compromise data integrity...

CVE-2023-23110

An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the...

CVE-2023-23110

CVE-2023-23110 describes a firmware modification vulnerability in Netgear devices where the uploaded firmware image is protected by a fixed checksum. An attacker can perform a MITM modification to bypass checksum verification and alter user-uploaded firmware. Affected products/versions include WN...

CVE-2023-23110

An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the...

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

The vulnerability of the IBM Robotic Process Automation software lies in errors in the user interface’s information representation, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the IBM Robotic Process Automation software is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially create...

The vulnerability of the EcoStruxure Process Expert automation system, related to bypassing the authentication process, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EcoStruxure Process Expert automation system is related to the bypassing of the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...