DEBIAN-CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

Authentication flaw

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

UBUNTU-CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView (firmware: Ubuntu/Debian/Gentoo package usbview) is affected by CVE-2022-23220. The root cause is insecure Polkit configuration (example: allow_any=yes for pkexec) that disables authentication, allowing local users (including those via SSH) to execute code as root. Affected version: USBVi...

GLSA-202107-51 : IcedTeaWeb: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-51 IcedTeaWeb: Multiple vulnerabilities Multiple vulnerabilities have been discovered in IcedTeaWeb. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

Apache Commons FileUpload: Multiple vulnerabilities

Background The Apache Commons FileUpload package makes it easy to add robust, high-performance, file upload capability to your servlets and web applications. Description Multiple vulnerabilities have been discovered in Apache Commons FileUpload. Please review the CVE identifiers referenced below...

Gentoo 安全漏洞

Gentoo is an open source Linux system from the Gentoo Foundation. There is a security vulnerability in Gentoo. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

Shanghai Chuangtu Network Technology Co., Ltd. culture cloud has a logic flaw vulnerability

Shanghai Chuangtu Network Technology Co., Ltd. specializes in science and technology innovation services in the field of culture and tourism. Shanghai Chuangtu Network Technology Co., Ltd. cultural cloud there is a logic flaw vulnerability, attackers can use the vulnerability to modify the return...

BladeEnc: Buffer overflow

Background BladeEnc is an mp3 encoder. Description A crafted file could cause a buffer overflow in the iterationloop function in BladeEnc. Impact A remote attacker could entice a user to open a specially crafted using BladeEnc, possibly resulting in execution of arbitrary code with the privileges...

GLSA-202105-05 : Mutt, NeoMutt: Denial of service

The remote host is affected by the vulnerability described in GLSA-202105-05 Mutt, NeoMutt: Denial of service It was discovered that Mutt, and NeoMutt did not properly handle certain situations where an IMAP sequence set ends with a comma. Impact : A remote attacker could entice a user to connect...

GLSA-202105-08 : ICU: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-08 ICU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ICU. Please review the upstream bugs referenced below for details. Impact : Remote attackers could cause a Denial of Service condition or...

GLSA-202105-07 : Telegram: Security bypass

The remote host is affected by the vulnerability described in GLSA-202105-07 Telegram: Security bypass It was discovered that Telegram failed to invalidate a recently active session. Impact : Please review the referenced CVE identifiers for details. Workaround : There is no known workaround at th...

GLSA-202105-06 : Smarty: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-06 Smarty: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Smarty template engine. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202105-02 : stunnel: Improper certificate validation

The remote host is affected by the vulnerability described in GLSA-202105-02 stunnel: Improper certificate validation It was discovered that stunnel did not correctly verified the client certificate when options redirect and verifyChain are used. Impact : A remote attacker could send a specially...

GLSA-202105-09 : BusyBox: Denial of service

The remote host is affected by the vulnerability described in GLSA-202105-09 BusyBox: Denial of service It was discovered that BusyBox mishandled the error bit on the huftbuild result pointer when decompressing GZIP compressed data. Impact : A remote attacker could entice a user to open a special...

GLSA-202104-09 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202104-09 Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CV...