432 matches found
MAL-2023-586 Malicious code in mdes_digital_enablement_api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef91fec71d700626e729317e9beb9132a1be4c4c60fce5f67f94ceae1a198435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-47938
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2TREECONNECT...
UBUNTU-CVE-2022-3996
If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...
CVE-2022-4068 Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...
CVE-2022-4068 Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...
August 9, 2022âKB5016616 (OS Builds 19042.1889, 19043.1889, and 19044.1889)
None None...
CVE-2022-2975
A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...
CVE-2022-2975
A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...
CVE-2022-2975
A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...
CVE-2022-2975
The CVE-2022-2975 issue affects Avaya Aura Application Enablement Services web application. A weak-permissions flaw allows an administrative user to modify accounts, which can lead to arbitrary code execution as the root user. Affected versions are 8.0.0.0â8.1.3.4 and 10.1.0.0â10.1.0.1; versions ...
CVE-2022-2975: Improper Privilege Management
A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...
Avaya Aura Application Enablement Services ĺŽĺ ¨ćźć´
Avaya Aura Application Enablement Services is a server-based software solution from Avaya, USA. It provides an enhanced set of telephony APIs, protocols, Web services, and direct IP access to media, and supports standards such as CSTA, JTAPI, and TSAPI that expose Avaya Aura Communication Manager...
PT-2022-19817 ¡ Avaya ¡ Avaya Aura Application Enablement Services
Name of the Vulnerable Software and Affected Versions: Avaya Aura Application Enablement Services versions 8.0.0.0 through 8.1.3.4 Avaya Aura Application Enablement Services versions 10.1.0.0 through 10.1.0.1 Description: A vulnerability related to weak permissions was detected in the Avaya Aura...
CVE-2022-2975 Avaya Aura Application Enablement Services weak permissions in web application
A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...
PT-2025-38327
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the Btrfs file system related to quota management. Specifically, the issue occurs when enabling quotas, where a transaction commit is followed by setting t...
September 20, 2022âKB5017380 (OS Builds 19042.2075, 19043.2075, and 19044.2075) Preview
None None...
Ubuntu: Security Advisory (USN-4163-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-2459
GitLab Enterprise Edition (GitLab EE) is affected by CVE-2022-2459 in affected versions prior to 15.0.5, versions 15.1 before 15.1.4, and versions 15.2 before 15.2.1. Description: an issue could allow email-invited members to join a project even after the group-owner setting to prevent adding mem...