Lucene search
+L

13413 matches found

osv_gsd
osv_gsd
•added 2022/07/31 2:04 p.m.•19 views

GSD-2022-1004380 ASoC: Intel: sof_sdw: handle errors on card registration

ASoC: Intel: sofsdw: handle errors on card registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32441

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to a data-race around sysctl icmp errors use inbound ifaddr. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•2 views

PT-2022-32660

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue concerns a data-race around sysctl icmp errors use inbound ifaddr. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

5.7AI score
SaveExploits0References1
Fedora
Fedora
•added 2022/07/30 2:00 a.m.•25 views

[SECURITY] Fedora 36 Update: golang-github-pelletier-toml-1.9.4-3.fc36

Go-toml provides the following features for using data parsed from TOML documents: - Load TOML documents from files and string data - Easily navigate TOML structure using Tree - Mashaling and unmarshaling to and from data structures - Line & column position data for all parsed elements - Query...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/07/29 12:00 a.m.•19 views

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.3AI score0.01076EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/07/29 12:00 a.m.•13 views

Samba Authentication Privilege Escalation

The vulnerability of the Samba network file system is related to errors during authentication procedures. Exploiting this vulnerability allows a malicious actor, operating remotely, to alter the password of an arbitrary user and gain full access to the account...

9CVSS6.6AI score0.01192EPSS
SaveExploits0References15Affected Software9
CNVD
CNVD
•added 2022/07/29 12:00 a.m.•85 views

Adobe Acrobat and Adobe Reader Resource Management Error Vulnerability (CNVD-2022-56089)

Adobe Acrobat and Adobe Reader are the United States of America Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Reader is a set of PDF document reading software. Adobe Acrobat and Adobe Reader there are resource management error...

5.5CVSS6.1AI score0.04485EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/07/27 12:00 a.m.•16 views

FileWave Cross-Platform Authentication Full Access

The vulnerability of the FileWave cross-platform server for managing mobile devices is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the platform...

10CVSS8AI score0.16372EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2022/07/27 12:00 a.m.•2 views

PT-2022-37881

Уязвимость функции intel context migrate copy модуля drivers/gpu/drm/i915/gt/intel migrate.c драйвера инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с ошибками управления состоянием. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать...

5.5CVSS0.00215EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2022/07/26 12:00 a.m.•17 views

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures using the MySQL protocol...

6.8CVSS6.2AI score0.01841EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/07/26 12:00 a.m.•15 views

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL protocol...

6.8CVSS6.2AI score0.01721EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/07/26 12:00 a.m.•22 views

DevTools sourceMapURL Disclosure

The vulnerability of the sourceMapURL function in the DevTools browser extension for web development is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

5.4CVSS6.7AI score0.006EPSS
SaveExploits1References5Affected Software2
Positive Technologies
Positive Technologies
•added 2022/07/25 12:00 a.m.•1 views

PT-2022-37879

Уязвимость функции ice reset vf модуля drivers/net/ethernet/intel/ice/ice vf lib.c драйвера сетевых адаптеров Ethernet Intel ядра операционной системы Linux связана с ошибками управления состоянием. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

5.5CVSS0.00235EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2022/07/25 12:00 a.m.•17 views

PT-2022-3853 · Filewave · Filewave

Name of the Vulnerable Software and Affected Versions: FileWave versions prior to 14.6.3 FileWave versions 14.7.x prior to 14.7.2 Description: The issue is related to errors during the authentication procedure in the FileWave platform, which is a cross-platform solution for mobile device...

9.8CVSS9.6AI score0.16372EPSS
SaveExploits1References10
osv_oesa
osv_oesa
•added 2022/07/22 11:05 a.m.•25 views

OESA-2022-1764 lua security update

Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description. Security Fixes: An issue in the component luaGrunerror of Lua v5.4.4 and below leads to...

7.5CVSS7.6AI score0.02841EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/07/22 12:00 a.m.•20 views

Intel RealSense ID Solution F450 Disclosure

The vulnerability of the microprogramming software in the integrated facial authentication module of Intel RealSense ID Solution F450 is related to initialization errors. Exploiting this vulnerability can allow attackers to disclose protected information...

4.9CVSS6AI score0.00258EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/07/22 12:00 a.m.•22 views

Oracle Solaris Kernel DoS

The vulnerability of the Oracle Solaris operating system’s kernel is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

4.6CVSS6.4AI score0.00227EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/07/22 12:00 a.m.•21 views

Oracle Database DoS

The vulnerability of the Oracle Database – Enterprise Edition RDBMS Security component of the Oracle Database Server is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the Oracle Net protocol...

4CVSS6.5AI score0.00885EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/07/21 12:00 a.m.•15 views

Oracle MySQL Server DoS

The vulnerability of the Server component – the stored procedure in the Oracle MySQL Server database management system – is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

6.8CVSS6.2AI score0.01683EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/07/21 12:00 a.m.•23 views

Remote Administration Daemon Maintenance Failure

The vulnerability of the Remote Administration Daemon component for operating systems based on Oracle Solaris is related to errors in resource release. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through various network protocols...

7.8CVSS7.4AI score0.01307EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder