CVE-2022-41095 Windows Digital Media Receiver Elevation of Privilege Vulnerability

...

CVE-2022-41095 Windows Digital Media Receiver Elevation of Privilege Vulnerability

...

PT-2022-27249 · Huawei · Huawei Recovery

Name of the Vulnerable Software and Affected Versions: Huawei Recovery affected versions not specified Description: The issue is related to a race condition vulnerability in SD upgrade mode, which may affect data confidentiality. There is no information provided about the estimated number of...

CVE-2022-41095

Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.

CVE-2022-29836

CVE-2022-29836 describes a post-authenticated path traversal vulnerability in HTTP API endpoints of Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices. The issue allows an authenticated attacker to manipulate parameters to access arbitrary filesystem locations and potential...

CVE-2022-29836: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability was discovered via an HTTP API on Western Digital My Cloud Home; My Cloud Home Duo; and SanDisk ibi devices that could allow an attacker to abuse certain parameters to point to random locations on the file...

CVE-2022-41095: Undefined Security Weakness

Windows Digital Media Receiver Elevation of Privilege Vulnerability...

CVE-2022-29836 Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP API

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability was discovered via an HTTP API on Western Digital My Cloud Home; My Cloud Home Duo; and SanDisk ibi devices that could allow an attacker to abuse certain parameters to point to random locations on the file...

Western Digital My Cloud Home 路径遍历漏洞

Western Digital My Cloud Home is an easy-to-use personal cloud storage device from Western Digital. It plugs directly into a Wi-Fi router to protect your digital life. A security vulnerability exists in Western Digital My Cloud Home, which stems from an HTTP API that allows an attacker to abuse...

Windows Digital Media Receiver Elevation of Privilege Vulnerability

...

PT-2022-5452 · Microsoft · Windows Digital Media Receiver +1

Name of the Vulnerable Software and Affected Versions: Windows Digital Media Receiver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Digital Media Receiver component, allowing an attacker to elevate their privileges. This can...

PT-2022-27241 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns missing parameter type validation in the DRM module. Successful exploitation may affect availability. No information is provided abou...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Digital Media. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based...

Huawei EMUI 输入验证错误漏洞

Huawei EMUI is an Android-based mobile operating system developed by the Chinese company Huawei Huawei. A denial of service vulnerability exists in Huawei EMUI 12.0.0, which stems from a lack of parameter type validation in the DRM module, and can be exploited by an attacker to affect the...

CVE-2022-2387

The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete arbitrary post via a CSRF attack...

CVE-2022-2387

The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete arbitrary post via a CSRF attack...

Cross site request forgery (csrf)

The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete arbitrary post via a CSRF attack...

WordPress plugin Easy Digital Downloads 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in the...

CVE-2022-2387

CVE-2022-2387 affects the Easy Digital Downloads WordPress plugin prior to v3.0. The vulnerability is a CSRF flaw in the deletion of payment history and a failure to verify that the target post is a payment history, enabling a logged-in attacker to cause arbitrary post deletions via CSRF. Documen...

CVE-2022-2387 Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF

The Easy Digital Downloads WordPress plugin before 3.0 does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete arbitrary post via a CSRF attack...