Design/Logic Flaw

The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity...

PT-2022-25962 · Unknown · Home Screen Module

Name of the Vulnerable Software and Affected Versions: Home screen module affected versions not specified Description: The issue affects the service logic processing in the home screen module. Successful exploitation may impact data integrity. Recommendations: At the moment, there is no informati...

CVE-2022-41588

The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity...

CVE-2022-41588

The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity...

CVE-2022-41588

CVE-2022-41588 concerns Huawei HarmonyOS’ home screen module, specifically a vulnerability in the module’s service logic processing. Multiple connected sources identify the issue as a logic/error in processing within the home screen component, with exploitation potentially affecting data integrit...

CVE-2022-31629

A vulnerability was found in PHP due to the way PHP handles HTTP variable names. It interferes with HTTP variable names that clash with ones that have a specific semantic meaning. This vulnerability allows network and same-site attackers to set a standard insecure cookie in the victim's browser,...

CVE-2022-34434

CVE-2022-34434 affects Cloud Mobility for Dell Storage versions 1.3.0 and earlier, due to an improper access control hole in the Postgres database that an attacker with root access to vApp or containerized deployments could exploit to modify or delete core Tables, impacting integrity and availabi...

Huawei HarmonyOS Logic Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A logic error vulnerability exists in the processing of business logic in the Huawei HarmonyOS home screen module, which can be exploited by an attacker to...

The vulnerability of the SMTP server of the SuiteCRM system, which manages customer relationships, allows attackers to compromise the integrity of the protected information.

The vulnerability of the SMTP server of the SuiteCRM system for managing customer relationships is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-2501)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2538)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : glibc (EulerOS-SA-2022-2501)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The nameserver caching daemon nscd in the GNU C Library aka glibc or libc6 2.29 through 2.33, when processing a request for netgro...

Security Bulletin: NVIDIA CUDA Toolkit - October 2022

NVIDIA has released a software update for NVIDIA® CUDA® Toolkit software. This update addresses security issues that may lead to code execution, denial of service, or information disclosure. To protect your system, download and install this software update from the CUDA Toolkit Downloads page. Go...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A logic error vulnerability exists in the processing of business logic in the Huawei HarmonyOS home screen module, which can be exploited by an attacker to...

The vulnerability of the strcpy() function in Netgear Nighthawk AC1900 R7000 wireless router software allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the strcpy function in Netgear Nighthawk AC1900 R7000 wireless router software lies in the fact that the write operation goes beyond the buffer boundaries into memory when processing the binary file wl. Exploiting this vulnerability could allow an attacker to compromise the...

Vulnerabilities in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to resource management errors, allow attackers to compromise the confidentiality and integrity of protected information.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to resource management errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of information that is loaded from subresources...

The vulnerability of the strcpy() function in Netgear N300 wireless router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the strcpy function implementation in Netgear N300 wireless router microprogramming software WNR2000v4 is related to the issue of writing operations beyond the buffer boundaries when processing configuration files for uHTTPd web servers. Exploiting this vulnerability allows a...

Security Bulletin: Due to use of IBM® SDK Java™ Technology Edition, IBM Virtualization Engine TS7700 is vulnerable to a data integrity threat (CVE-2022-21496)

Summary IBM Virtualization Engine TS7700 is vulnerable to a data integrity threat CVE-2022-21496 due to the use of IBM® SDK Java™ Technology Edition, Version 8. The SDK is used by the TS7700 to provide the Management Interface, to perform cache management, and to provide Transparent Cloud Tiering...

SUSE SLES15: dpdk / dpdk-devel / dpdk-kmp-default / dpdk-thunderx / etc (SUSE-SU-2022:3429-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3429-1 advisory. - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs bsc1202903. - CVE-2022-2819...

Security Bulletin: Vulnerabilities in FasterXML Jackson Databind and Apache Xerces affect IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments

Summary IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments may be affected by the below FasterXML Jackson Databind and Apache Xerces vulnerabilities CVEs. Vulnerability Details CVEID:CVE-2020-25649 DESCRIPTION:...