Mitsubishi Electric Multiple Factory Automation Products (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module Vulnerabilities: Infinite Loop, OS Command Injection 2...

no one can create a proposal by calling propose() or voting on any proposal

Lines of code Vulnerability details Impact -The users could not create a proposal by invoking propose -The users could not be voting on any proposal by invoking castVoteBySig, castVoteWithReason, castRefundableVoteInternal,castRefundableVoteWithReason, castRefundableVote and castVote -The propose...

Ubuntu: Security Advisory (USN-302-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-37768

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...

DEBIAN-CVE-2022-37768

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...

CVE-2022-37768

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...

Code injection

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...

CVE-2022-37768

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...

UBUNTU-CVE-2022-37768

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...

CVE-2022-37768

The CVE-2022-37768 entry concerns the libjpeg project, where commit 281daa9 is reported to introduce an infinite loop in Frame::ParseTrailer. The issue affects libjpeg and has a high impact on availability (CVSS: 7.5, Network attack vector, no privileges required, no user interaction). Multiple c...

CVE-2022-37768

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...

CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

DEBIAN-CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

UBUNTU-CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

Design/Logic Flaw

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

CVE-2022-35166

CVE-2022-35166 concerns a flaw in libjpeg caused by commit 842c7ba, which enables an infinite loop in the JPEG::ReadInternal component. The issue is documented across multiple feeds (NVD entry for CVE-2022-35166, Red Hat, OSV, Ubuntu/UBUNTU-CVE, Debian/OSV) describing the root cause as an infinit...