PT-2022-27969 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 macOS Monterey versions prior to 12.6.1 macOS Big Sur versions prior to 11.7.1 Description: A race condition was addressed with additional validation, which may have allowed an app to modify protected parts of the...

CVE-2022-39112

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...

CVE-2022-39115

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...

CVE-2022-39117

In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-39108

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

CVE-2022-39109

In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed...

CVE-2022-39107

In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed...

CVE-2022-38688

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-38677

In cell service, there is a missing permission check. This could lead to local denial of service in cell service with no additional execution privileges needed...

WordPress Ocean Extra plugin <= 2.0.4 - Auth. PHP Objection Injection vulnerability

Auth. PHP Objection Injection vulnerability discovered by Nguyen Duy Quoc Khanh in the WordPress Ocean Extra plugin versions = 2.0.4. Solution Update the WordPress Ocean Extra plugin to the latest available version at least 2.0.5...

Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection

The plugin unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import intentionally or not a malicious Customizer Styling file and a suitable gadget chain is present on the blog. PoC To simulate a gadget chain, put the followin...

Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection

The plugin unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import intentionally or not a malicious Customizer Styling file and a suitable gadget chain is present on the blog. To simulate a gadget chain, put the following co...

The vulnerability of the ha_maria::extra component in the MariaDB database, which allows a hacker to cause a service failure.

The vulnerability of the hamaria::extra component in the MariaDB database is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

CVE-2022-39119

In network service, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-39119

In network service, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

OESA-2022-1892 sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fixes: zlib through 1.2.12 has a heap-based buffer over-read or buff...

mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements

MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...

CLSA-2022-1660762053 Fixed CVE-2022-37434 in zlib

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

CLSA-2022-1660759457 Fixed CVE-2022-37434 in zlib

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate...

Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from the American company Google. Google Android 13 suffers from a security vulnerability that stems from dereferencing null pointers, causing a process crash. The vulnerability is exploited by an attacker to remotely denial of service...