Lucene search
+L

11507 matches found

osv_cve
osv_cve
•added 2022/05/03 8:15 p.m.•21 views

CVE-2022-20089

In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06240397; Issue ID: ALPS06240397...

6.7CVSS5.9AI score0.00113EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/03 8:15 p.m.•30 views

Memory corruption

In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06240397; Issue ID: ALPS06240397...

4.6CVSS6.8AI score0.00113EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/03 12:00 a.m.•9 views

CVE-2022-20089: Undefined Security Weakness

In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06240397; Issue ID: ALPS06240397...

6.7CVSS7AI score0.00113EPSS
SaveExploits0References1
Broadcom
Broadcom
•added 2022/05/03 12:00 a.m.•60 views

BSA-2022-1840

Security Advisory ID : BSA-2022-1840 Component : debug mode Revision : 1.0 An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in...

5CVSS5.2AI score0.00219EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2022/05/01 5:47 p.m.•12 views

GHSA-MXH8-XGQ9-W782 MoinMoin Insertion of Sensitive Information into Log File

An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "showtraceback=0" to their site configurations to disable debug tracebacks...

5CVSS5.8AI score0.01361EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2022/05/01 5:47 p.m.•42 views

MoinMoin Insertion of Sensitive Information into Log File

An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "showtraceback=0" to their site configurations to disable debug tracebacks...

5CVSS6.6AI score0.01361EPSS
SaveExploits0References8Affected Software1
Metasploit
Metasploit
•added 2022/04/27 12:00 a.m.•173 views

ZoneMinder Language Settings Remote Code Execution

This module exploits arbitrary file write in debug log file option chained with a path traversal in language settings that leads to a remote code execution in ZoneMinder surveillance software versions before 1.36.13 and before 1.37.11 Module Options msf use exploit/unix/webapp/zoneminder/langexec...

9.8CVSS9.2AI score0.67128EPSS
SaveExploits6
attackerkb
attackerkb
•added 2022/04/26 4:15 a.m.•10 views

CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

9.8CVSS7.8AI score0.67128EPSS
SaveExploits6References7
NVD
NVD
•added 2022/04/26 4:15 a.m.•36 views

CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

9.8CVSS0.67128EPSS
SaveExploits6References5
UbuntuCve
UbuntuCve
•added 2022/04/26 4:15 a.m.•60 views

CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

9.8CVSS7.8AI score0.67128EPSS
SaveExploits6References6
Prion
Prion
•added 2022/04/26 4:15 a.m.•44 views

Remote code execution

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

7.5CVSS9.7AI score0.67128EPSS
SaveExploits6References5Affected Software1
osv_ubuntu
osv_ubuntu
•added 2022/04/26 4:15 a.m.•16 views

UBUNTU-CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

9.8CVSS7.9AI score0.67128EPSS
SaveExploits6References7
AlpineLinux
AlpineLinux
•added 2022/04/26 4:15 a.m.•168 views

CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

9.8CVSS5.2AI score0.67128EPSS
SaveExploits6
osv_cve
osv_cve
•added 2022/04/26 3:15 a.m.•46 views

CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

7.7AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2022/04/26 3:15 a.m.•41 views

CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

10AI score0.67128EPSS
SaveExploits6References5
Mend
Mend
•added 2022/04/26 3:15 a.m.•5 views

CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

9.8CVSS0.67128EPSS
SaveExploits6References9
Debian CVE
Debian CVE
•added 2022/04/26 3:15 a.m.•82 views

CVE-2022-29806

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

9.8CVSS5.2AI score0.67128EPSS
SaveExploits6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/26 12:00 a.m.•5 views

CVE-2022-29806: Improper Limitation of a Pathname to a Restricted Directory

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

9.8CVSS8.6AI score0.67128EPSS
SaveExploits6References2
Positive Technologies
Positive Technologies
•added 2022/04/26 12:00 a.m.•8 views

PT-2025-8455

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc1 Description A vulnerability in the Linux kernel has been resolved by applying DMA engine limits to the maximum segment size in the jz4740 MMC host driver. This change is necessary to prevent warnings...

5.5CVSS0.00262EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•6 views

PT-2022-30177

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A bug in the Linux Kernel, introduced in version v5.11, causes a sleep-in-atomic issue due to the genpd debug remove function. The actual impact and attack plausibility of this issue have not...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder