CVE-2022-30712

CVE-2022-30712 relates to an elevation-of-privilege issue in Samsung KfaOptions on Samsung mobile devices. The root cause is a lack of proper authentication logic in KfaOptions, permitting an attacker to launch certain activities. Multiple sources corroborate this vulnerability description and ti...

CVE-2022-30711

The CVE-2022-30711 entry describes an improper validation vulnerability in Samsung Mobile FeedsInfo prior to SMR Jun-2022 Release 1. The issue, caused by insufficient input validation in FeedsInfo, can allow an attacker to launch certain activities. Affected product/component: Samsung Mobile Feed...

CVE-2022-30710

CVE-2022-30710 affects Samsung Mobile (Android) RemoteViews. The vulnerability is described as an improper validation in RemoteViews prior to the SMR Jun-2022 Release 1, enabling attackers to launch certain activities. Public sources (NVD, Red Hat, CNVD) align on elevation/privilege aspects, with...

PT-2022-20249

Name of the Vulnerable Software and Affected Versions KfaOptions versions prior to SMR Jun-2022 Release 1 Description The issue is related to improper validation in KfaOptions, which can be exploited by attackers to launch certain activities. Recommendations For versions prior to SMR Jun-2022...

PT-2022-20248

Name of the Vulnerable Software and Affected Versions FeedsInfo versions prior to SMR Jun-2022 Release 1 Description The issue is related to improper validation in FeedsInfo, allowing attackers to launch certain activities. Recommendations For versions prior to SMR Jun-2022 Release 1, update to S...

PT-2022-20250

Name of the Vulnerable Software and Affected Versions LSOItemData versions prior to SMR Jun-2022 Release 1 Description The issue is related to improper validation in LSOItemData, which allows attackers to launch certain activities. Recommendations For versions prior to SMR Jun-2022 Release 1,...

PT-2022-20247

Name of the Vulnerable Software and Affected Versions RemoteViews versions prior to SMR Jun-2022 Release 1 Description The issue is related to improper validation in RemoteViews, which can be exploited by attackers to launch certain activities. Recommendations For versions prior to SMR Jun-2022...

Cisco Adaptive Security Appliance Software Remote Access SSL VPN DoS (cisco-sa-asa-dos-tL4uA4AA)

A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper validation of errors that are logged as a...

Siemens SICAM P850/P855 Code Execution

The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional measuring devices is related to the improper verification of certain GET and POST requests. Exploiting this vulnerability can allow an attacker to trigger service failures or execute arbitrary codes...

Improper Validation

chromium is vulnerable to improper validation. The vulnerability exists because of insufficient validation of untrusted input in Data Transfer which allows an attacker to gain access to the system...

Improper Validation

chromium is vulnerable to improper validation. The vulnerability exists due to insufficient policy enforcement in File System API which allows an attacker to gain access to the system...

CVE-2022-29082

Dell EMC NetWorker (versions 19.1.x–19.6.x, including 19.6.0.1/19.6.0.2) is affected by an Improper Validation of Certificate with Host Mismatch vulnerability in RabbitMQ port 5671, per multiple sources. The issue allows remote certificate spoofing due to host-mismatch certificate validation. No ...

CVE-2022-29082: Improper Validation of Certificate with Host Mismatch

Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 19.5.x,19.5.0.x, 19.6 and 19.6.0.1 and 19.6.0.2 contain an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port 5671 which could allow remote...

GHSA-63CQ-PPQ8-CW6G Improper Input Validation in RESTEasy

A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to...

Improper Certificate Validation

Overview std/crypto/x509 is a Go standard library package std/crypto/x509 Affected versions of this package are vulnerable to Improper Certificate Validation. Go Vulnerability Report: On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate...

SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi

In SaltStack the salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH...

Buffer overflow

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...

CVE-2022-29217

PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the JWT token can choose the used signing algorithm. The PyJWT library requires that the application chooses what algorithms are supported. The application can...

Improper Certificate Validation

github.com/pion/dtls is vulnerable to improper certificate validation. The vulnerability exists because the flight4Parse function of flight4handler.go accepts client certificates without verifying them...

Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML

The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java OpenSAML-J before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a...