11714 matches found
CVE-2022-40304
A flaw was found in libxml2. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary. In this case, the dictionary becomes corrupted resulting in logic errors, including memory errors like double free...
Double Free
libxml2 is vulnerable to double free. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary which may become corrupted resulting in logic errors, including memory errors like double free...
Need to enter credentials multiple times via Workspace app access on MAC OS clients
The users need to enter credentials multiple times when using Workspace app to login to Gateway on MAC OS clients. Finally, the users still encounter the following error. Web access works well. MAC OS version:...
The vulnerability of the Jenkins OpenShift Deployer Plugin, related to authentication errors, allows attackers to circumvent existing security restrictions and increase their privileges.
The vulnerability of the Jenkins OpenShift Deployer Plugin is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and gain increased privileges...
The vulnerability in the user interfaces of Google Chrome and Microsoft Edge allows attackers to carry out spear-phishing attacks.
The vulnerability of the user interfaces of Google Chrome and Microsoft Edge is related to information representation errors in the user interfaces. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created web page...
PT-2022-5263 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.1R3-S9 Junos OS versions 19.2 prior to 19.2R3-S6 Junos OS versions 19.3 prior to 19.3R3-S7 Junos OS versions 19.4 prior to 19.4R2-S7, 19.4R3-S8 Junos OS versions 20.1 prior to 20.1R3-S5 Junos OS versions 20.2 pri...
PT-2022-5928 · Linux +6 · Linux Kernel +6
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A race condition vulnerability has been found in the Linux Kernel, specifically affecting the kcm tx work function in the net/kcm/kcmsock.c file. This issue is caused by synchronizatio...
CVE-2022-38982
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked...
CVE-2022-38982
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked...
Privilege escalation
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked...
CVE-2022-38982
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked...
CVE-2022-38982
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked...
PT-2022-24638 · Unknown · Fingerprint Module
Name of the Vulnerable Software and Affected Versions: Fingerprint module affected versions not specified Description: The issue is related to service logic errors in the fingerprint module. Successful exploitation of this issue can lead to the phone lock being cracked. Recommendations: At the...
The vulnerability of the Azure Arc for local infrastructure connection software in Azure Stack Edge storage services allows a perpetrator to escalate their privileges.
The vulnerability of the Azure Arc for local infrastructure connection software in Azure Stack Edge storage solutions is related to access control errors. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
Google Chrome Security Update (stable-channel-update-for-desktop_11-2022-10) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
The vulnerability of the ruby-mysql library, related to errors in processing hypertext links, allows attackers to gain access to confidential data.
The vulnerability of the ruby-mysql library is related to errors in processing hypertext links. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data...
CVE-2022-35299
SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow...
CVE-2022-35299
SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow...
PT-2022-5428 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Storage Services. Exploitation of this issue may allow an attacker to gain unauthorized access and...
The vulnerability of the Special:ChangeContentModel function in the software for implementing a hypertext environment like MediaWiki allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Special:ChangeContentModel function in the MediaWiki software, which is used to implement the hypertext environment, is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...