CVE-2022-31248

A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java...

CVE-2022-30140

Windows iSCSI Discovery Service Remote Code Execution Vulnerability...

CVE-2022-30140

Windows iSCSI Discovery Service Remote Code Execution Vulnerability...

CVE-2022-30140

Windows iSCSI Discovery Service Remote Code Execution Vulnerability...

Remote code execution

Windows iSCSI Discovery Service Remote Code Execution Vulnerability...

CVE-2022-30140 Windows iSCSI Discovery Service Remote Code Execution Vulnerability

...

CVE-2022-30140

Technical details for CVE-2022-30140 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2022-20132

creationtimestamp| type| source ---|---|--- 2022-06-15 16:20:02+00:00| seen| https://t.me/cibsecurity/44482...

CVE-2022-20126

In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product...

CVE-2022-20126

In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product...

CVE-2022-20126

The vulnerability CVE-2022-20126 affects Android (Android-10 to Android-12L) via the Bluetooth stack: in AdapterService.java, setScanMode can enable Bluetooth discovery mode without user interaction due to a missing permission check. This creates local elevation of privilege with user execution p...

CVE-2022-31060

creationtimestamp| type| source ---|---|--- 2022-06-15 00:19:22+00:00| seen| https://t.me/cibsecurity/44462...

PT-2022-14368 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to a missing permission check in the setScanMode function of AdapterService.java, which could allow enabling Bluetooth discovery mode without user interaction...

CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

...

Design/Logic Flaw

An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure...

envoy: Segfault in GrpcHealthCheckerImpl

A flaw was found in Envoy. This flaw allows an attacker who controls an upstream host and also controls service discovery of that host via DNS, the EDS API, etc. to crash Envoy by forcing the removal of the host from service discovery and then failing the gRPC health check request. This issue...

envoy: Segfault in GrpcHealthCheckerImpl

A flaw was found in Envoy. This flaw allows an attacker who controls an upstream host and also controls service discovery of that host via DNS, the EDS API, etc. to crash Envoy by forcing the removal of the host from service discovery and then failing the gRPC health check request. This issue...

Malicious code in web-discovery-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80167dd7dbe2205334bd9500860fec39ff616c4093fca507357c6a1e7c2b6ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7067 Malicious code in web-discovery-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80167dd7dbe2205334bd9500860fec39ff616c4093fca507357c6a1e7c2b6ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...