2022-09 Dynamic Cumulative Update for Windows 11 for x64-based Systems (KB5017328)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

Moderate: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

PT-2022-25431 · Crafter Cms · Crafter Studio

Name of the Vulnerable Software and Affected Versions: Crafter Studio of Crafter CMS affected versions not specified Description: The issue allows authenticated developers to execute OS commands via FreeMarker SSTI due to improper control of dynamically-managed code resources. Recommendations: At...

Honeywell SoftMaster 代码问题漏洞

Honeywell SoftMaster is a software program from Honeywell USA. Honeywell SoftMaster suffers from a code issue vulnerability that stems from the fact that if an attacker manages to trick a valid user into loading a malicious DLL, then the attacker can execute code within the context and privileges...

SAMSUNG Smart Switch PC 代码问题漏洞

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. SAMSUNG Smart Switch PC suffers from a DLL hijacking vulnerability that originates when a process attempts to load a DLL without specifying the absolute path to the DLL. An attacker can exploit...

PT-2022-25035 · Samsung · Smart Switch Pc

Name of the Vulnerable Software and Affected Versions: Smart Switch PC versions prior to 4.3.22083 3 Description: The issue allows an attacker to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 4.3.22083 3, update to version 4.3.22083 3 or late...

The vulnerability of the performance optimization tool of the HP Performance Tune-up software, a software solution for automated support and driver updates by HP Support Assistant, allows a hacker to execute arbitrary code.

The vulnerability of the HP Performance Tune-up performance optimization tool, a software solution for automated support and driver updates by HP Support Assistant, lies in the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2022-36403

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary code.

The vulnerability of the NPM packet manager’s vm2 library is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

GHSA-GWC9-M7RH-J2WW vulnerabilities

Vulnerabilities for packages: kubeflow-fips, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, k3d...

GHSA-GWC9-M7RH-J2WW vulnerabilities

Vulnerabilities for packages: kubeflow, terraform-provider-sendgrid, k3d, dynamic-localpv-provisioner...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, kubeflow, grpcurl, kubeflow-katib, hey, wireguard-go, k3d, dynamic-localpv-provisioner...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: kubeflow-fips, grpcurl, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, hey, kubeflow-katib, wireguard-go, k3d, kube-state-metrics...

Outbyte PC Repair 代码问题漏洞

Outbyte PC Repair is a comprehensive computer repair tool from Outbyte. Designed to solve a range of different system problems, clean up drives, optimize performance and improve your privacy and security. A security vulnerability exists in Outbyte PC Repair Installation File version 1.7.112.7856,...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, kubeflow, grpcurl, kubeflow-katib, hey, wireguard-go, k3d, dynamic-localpv-provisioner...

CVE-2022-28884

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: kubeflow-fips, grpcurl, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, hey, kubeflow-katib, wireguard-go, k3d, kube-state-metrics...

CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: kubeflow, terraform-provider-sendgrid, k3d, dynamic-localpv-provisioner...

CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: kubeflow-fips, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, k3d...