14254 matches found
Anker Eufy Homebase get_aes_key_info_by_packetid Authentication Bypass
The vulnerability of the getaeskeyinfobypacketid function in Anker Eufy Homebase surveillance systems is related to a small number of possible random values. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...
ALBA-2022:4744 sos bug fix and enhancement update
The sos package contains a set of utilities that gather information from system hardware, logs, and configuration files. The information can then be used for diagnostic purposes and debugging. Bug Fixes and Enhancements: sos collect fails to get node list from a pacemaker cluster BZ2071695 Tracke...
DEBIAN-CVE-2021-42614
A use after free in infowidthinternal in bkinfo.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted text document...
UBUNTU-CVE-2021-42614
A use after free in infowidthinternal in bkinfo.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted text document...
CVE-2021-42614
A use after free in infowidthinternal in bkinfo.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted text document...
Magento 2 Community Edition Information Leak
An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web service endpoint does not properly enforce parameters related to access control. This could be abused to leak customer information via crafted SOAP reques...
com.nirima:docker-plugin (>=0.18, <=1.0.4), org.jenkins-ci.plugins:antexec (>=1.7, <=1.10) +3 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.7)
org.jenkins-ci.plugins:token-macro MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - com.nirima:docker-plugin =0.18, =1.7, =2.30.1, =1.11, =0.0.5, =0.2.0 Source cves:...
PT-2025-8367
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the RDMA/hfi1 component. The issue occurs when there is a failure during the probe of hfi1 before the sdma map lock is...
PT-2022-11632 · Halibut +2 · Halibut +2
Name of the Vulnerable Software and Affected Versions: Halibut version 1.2 Description: A use after free in cleanup index in index.c allows an attacker to cause a segmentation fault or possibly have other unspecified impact via a crafted text document. Recommendations: For Halibut version 1.2, as...
Halibut resource management error vulnerability
Halibut is a secure, RPC-based open source communication framework from the individual developers of Octopus Deploy. A security vulnerability exists in Halibut version 1.2, which stems from a post-release reuse issue in infowidthinternal in bkinfo.c. The vulnerability is caused by an unspecified...
PT-2022-11634 · Halibut +2 · Halibut +2
Name of the Vulnerable Software and Affected Versions: Halibut version 1.2 Description: A use after free in info width internal in bk info.c allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted text document. Recommendations: For Halibut version...
ROS-20220524-21
The cURL command-line utility vulnerability is related to a bug in the HSTS implementation that could allow curl to continue using the HTTP protocol instead of HTTPS if the hostname in the specified URL used an endpoint but did not use it when building the HSTS cache. Exploitation of the...
Improper access control
Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...
CVE-2022-30016
Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...
Snake Keylogger Spreads Through Malicious PDFs
While most malicious e-mail campaigns use Word documents to hide and spread malware, a recently discovered campaign uses a malicious PDF file and a 22-year-old Office bug to propagate the Snake Keylogger malware, researchers have found. The campaign—discovered by researchers at HP Wolf...
PT-2022-19972
Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue is related to Incorrect Access Control. It can be exploited via the API endpoint "http://localhost/rdms/admin/?page=system info". Recommendations For Rescue Dispatch Managemen...
CVE-2022-0303
No description is available for this CVE...
Information Disclosure
thunderbird is vulnerable to information disclosure. The parent process does not properly check whether the speech synthesis feature is enabled when receiving instructions from a child process...
PT-2022-38124
Уязвимость функции bond ethtool get ts info модуля drivers/net/bonding/bond main.c драйвера поддержки сетевых устройств ядра операционной системы Linux связана с переполнением буфера на основе стека. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
OESA-2022-1660 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access.CVE-2021-33061 A use after free in the Linux...