14559 matches found
CheckMK Raw Edition security vulnerabilities
tribe29 CheckMK Raw Edition is a comprehensive and flexible IT monitoring system from tribe29, Germany. A security vulnerability exists in CheckMK Raw Edition that stems from a problem with permissions in the /var/lib/dpkg/info/ path. An attacker can exploit the vulnerability to change files or...
GHSA-HFXP-P695-629X abomonation transmutes &T to and from &[u8] without sufficient constraints
This transmute is at the core of the abomonation crates. It's so easy to use it to violate alignment requirements that no test in the crate's test suite passes under miri. The use of this transmute in serialization/deserialization also incorrectly assumes that the layout of a reprRust type is...
Play Store Apps Caught Spreading Android Malware to Millions
By Deeba Ahmed The apps were loaded with info-stealing malware that can extract victims Facebook credentials and download other software, etc.… This is a post from HackRead.com Read the original post: Play Store Apps Caught Spreading Android Malware to Millions...
A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
...
CVE-2022-30162
CVE-2022-30162 is a Windows kernel information disclosure vulnerability. Public records cite CVSSv3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with base score 5.5 (MEDIUM) and local access required; confidentiality impact is HIGH while integrity/availability are none. CVSSv2/2.0 shows a lower base sco...
Out-of-bounds
In parseRecursively of cppborparse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID...
PT-2022-37038
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash involves the ndpi strdup function, process ndpi collected info function, and ndpi workflow process...
CVE-2022-29612
SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticated user to misuse a function of sapcontrol...
CVE-2022-31845
A vulnerability in livecheck.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function...
CVE-2022-31308
A vulnerability in livemfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via execution of the exec cmd function...
Frequency Scaling Timing Power Side-Channels
Bulletin ID: AMD-SB-1038 Potential Impact: Information Disclosure Severity: Medium Summary AMD is aware of the academic research paper titled “Hertzbleed: Turning Power Side-Channel Attacks Into Remote Timing Attacks on x86”. AMD has been notified the researchers intend to submit their paper to...
Security Bulletin: IBM Spectrum Copy Data Management is vulnerable to bypassing authentication, information disclosure, XSS, CSRF, and reverse tabnabbing
Summary IBM Spectrum Copy Data Management is vulnerable to bypassing authentication restrictions, information disclosure due to an unnecessary open port, cross-site scripting XSS, cross-site request forgery CSRF, and reverse tabnabbing. Vulnerability Details CVEID:CVE-2022-22426 DESCRIPTION: IBM...
CVE-2022-2020
A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=systeminfo of the component System Name Handler. The manipulation with the input leads to cross site...
AZL-9917 CVE-2022-1998 affecting package kernel for versions less than 5.15.48.1-2
A use after free in the Linux kernel File System notify functionality was found in the way user triggers copyinforecordstouser call to fail in copyeventtouser. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...
DEBIAN-CVE-2022-1998
A use after free in the Linux kernel File System notify functionality was found in the way user triggers copyinforecordstouser call to fail in copyeventtouser. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...
CVE-2022-1998
A use after free in the Linux kernel File System notify functionality was found in the way user triggers copyinforecordstouser call to fail in copyeventtouser. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...
UBUNTU-CVE-2022-1998
A use after free in the Linux kernel File System notify functionality was found in the way user triggers copyinforecordstouser call to fail in copyeventtouser. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...
H3C Magic R100 Buffer Error Vulnerability
H3C Magic R100 is a router from H3C.A buffer overflow vulnerability exists in the H3C Magic R100 R100V100R005 version, which stems from a buffer overflow issue in the SetMobileAPInfoById parameter of the /goform/aspForm page. No detailed vulnerability details are currently available...
H3C Magic R100 Buffer Error Vulnerability
H3C Magic R100 is a router from H3C.A buffer overflow vulnerability exists in the H3C Magic R100 R100V100R005 version, which stems from a buffer overflow issue in the SetAPWifiorLedInfoById parameter of the /goform/aspForm page. No detailed vulnerability details are currently available...