CVE-2022-40741 SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Command Injection

Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service...

PT-2022-25503 · Unknown · Mail Sqr Expert

Name of the Vulnerable Software and Affected Versions: Mail SQR Expert affected versions not specified Description: The issue is related to insufficient filtering for special characters in a specific function of Mail SQR Expert. This allows an unauthenticated remote attacker to exploit the issue...

The vulnerability of the ngx_resolver.c component in the nginx HTTP server allows a attacker to cause a service failure.

The vulnerability of the ngxresolver.c component in the nginx HTTP server is related to memory allocation errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Border Gateway Protocol (BGP) implementation in the Ethernet VPN (EVPN) technology of Juniper Networks’ Junos OS and Junos OS Evolved allows a attacker to cause service interruptions.

The vulnerability of the Border Gateway Protocol BGP implementation in the Ethernet VPN EVPN technology of Juniper Networks’ Junos OS and Junos OS Evolved is related to improper handling of unexpected types of data. Exploiting this vulnerability can allow a malicious actor to cause service...

UBUNTU-CVE-2022-3437

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...

The vulnerability of the `vim regsub_both` function in the Vim editor’s regexp.c file allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the vim regsubboth function in the regexp.c file of the Vim text editor is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the ins_compl_add function in the insexpand.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inscompladd function in the insexpand.c component of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and...

The vulnerability of the `skipwhite` function in the `charset.c` component of the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the skipwhite function in the charset.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the spell_dump_compl function in the spell.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the spelldumpcompl function in the spell.c component of the Vim text editor is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the ins_compl_add function in the insexpand.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inscompladd function in the insexpand.c component of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and...

mysql: InnoDB unspecified vulnerability (CPU Jul 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of th...

mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

AliveCor KardiaMobile 安全漏洞

The AliveCor KardiaMobile is a personal electrocardiogram device from AliveCor, Inc. The AliveCor KardiaMobile suffers from a security vulnerability that stems from not encrypting its sound data protocol, the exploitation of which could allow an attacker to read a patient's ECG results or create ...

Vulnerability of the Server component: The Connection Handling module of the MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component, which handles database connections, exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the ngx_http_mp4_module in NGINX Open Source HTTP servers allows attackers to expose sensitive information or cause service failures. NGINX Open Source Subscription, NGINX Plus, and NGINX Ingress Controller platforms for application monitoring and management provide solutions to address this issue.

The vulnerability of the ngxhttpmp4module in NGINX Open Source HTTP servers, NGINX Open Source Subscription, NGINX Plus, and NGINX Ingress Controller platforms is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose...

The vulnerability of the ngx_http_hls_module module in the NGINX Application Monitoring and Management Platform Ingress Controller allows a attacker to cause service interruptions or potentially exert other effects.

The vulnerability of the ngxhttphlsmodule module in the NGINX Application Monitoring and Management Controller platform relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service failures or potentially have other adver...

The vulnerability in the driver drivers/net/hamradio/6pack.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the driver drivers/net/hamradio/6pack.c of the Linux operating system relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2022-6885 · Libtiff +7 · Libtiff +7

Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.4.0 Description: The issue is related to an out-of-bounds write in the TIFFmemcpy function in libtiff/tif unix.c:346 when called from extractImageSection in tools/tiffcrop.c:6826, allowing attackers to cause a...

The vulnerability of the implementation of the Amateur Radio AX.25 kernel in the Linux operating system allows a intruder to cause a service failure.

The vulnerability of the AX.25 protocol implementation in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the implementation of the Amateur Radio AX.25 kernel in the Linux operating system allows a intruder to cause a service failure.

The vulnerability of the AX.25 protocol implementation in the Linux operating system relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...