CVE-2022-35821

CVE-2022-35821 affects Microsoft Azure Sphere. The Azure Sphere Information Disclosure Vulnerability is due to insufficient protection of service data in the Azure Sphere OS. CVSSv3 metrics in the initial record indicate a Medium severity (4.4), with Local attack vector, Low attack complexity, an...

CVE-2022-30197

Technical details for CVE-2022-30197 are not provided in the supplied documents. Public information appears limited to a generic Windows Kernel information disclosure context; monitor official advisories and vendor updates for any concrete details or fixes.

CVE-2022-30134

CVE-2022-30134 is documented as an Exchange Server vulnerability linked to August 2022 updates. Connected sources list affected products as Microsoft Exchange Server 2016 CU23, 2019 CU11/CU12, and 2019 CU12 variants, with the update KB5015322 describing it among vulnerabilities fixed in that roll...

subscription-manager bug fix and enhancement update

An update is available for subscription-manager. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The subscription-manager packages provide programs and libraries...

Malware in pancake-info-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-5202 Malicious code in pancake-info-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0443a608b4568e8dc8b0e39a3b58804dac2a63c570a30f7752c5ca6ba41ce8d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pancake-info-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0443a608b4568e8dc8b0e39a3b58804dac2a63c570a30f7752c5ca6ba41ce8d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 8 : kernel-rt (RHSA-2022:5934)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5934 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

PT-2022-4340 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in the Visual Studio Code editor. This can be exploited by a remote attacker to execute arbitrary code. Recommendations: At...

CVE-2022-33733

Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission...

xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...

CVE-2022-31612

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash or a leak of internal kernel information...

AMD CPU Information Disclosure Vulnerability (AMD-SB-1038, Hertzbleed)

The AMD CPU on the remote host might be prone to an information disclosure vulnerability dubbed Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

fmpl.catalog.aspencat.info Cross Site Scripting vulnerability OBB-2823492

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-33090

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.250 Description A bug in the virtio net component related to xdp rxq info after suspend/resume has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-32674

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15.55 Description A potential issue exists in the btrfs zoned code, specifically related to a leaked bioc in read zone info. The actual impact and attack plausibility have not yet been proven...

PT-2022-32727

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.51 Description The issue is related to a bug in the virtio net module, specifically with xdp rxq info after suspend/resume. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-32889

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.127 Description The issue is related to a bug in the virtio net component, specifically with xdp rxq info after suspend/resume. The actual impact and attack plausibility have not yet been proven...

PT-2022-32521

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description A bug in the virtio net module related to xdp rxq info after suspend/resume has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-33004

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.16 through 5.4.201 Description A bug in the virtio net module related to xdp rxq info after suspend/resume has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...