memos 安全漏洞

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos versions prior to 0.9.0, which stems from incorrect use of privileged APIs...

SAP NetWeaver Process Integration 安全漏洞

SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is primarily used for the exchange of information between internal systems and external ones. A security vulnerability...

Input validation

go-merkledag implements the 'DAGService' interface and adds two ipld node types, Protobuf and Raw for the ipfs project. A ProtoNode may be modified in such a way as to cause various encode errors which will trigger a panic on common method calls that don't allow for error returns. A ProtoNode...

The vulnerability of the implementations of TLS and SSL protocols in the microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Firepower Threat Defense (FTD) from the ASA 5500-X Series, Firepower 4100 Series, and Firepower 9300 Series allows attackers to induce service interruptions.

The vulnerability of the implementations of TLS and SSL protocols in microprogrammable network interface devices from Cisco Adaptive Security Appliances ASA and Firepower Threat Defense FTD of the ASA 5500-X Series, Firepower 4100 Series, and Firepower 9300 Series is related to the copying of...

Vulnerabilities fixed in Aruba AirWave Management Platform

Aruba has fixed vulnerabilities in the AirWave Management Platform. The vulnerabilities allow an authenticated user, without administrator privileges, may be able to perform to perform administrative tasks within the application. Aruba indicates that at least viewing and modifying network...

OESA-2022-2075 freetds security update

FreeTDS is an open source implementation of the TDS Tabular Data Stream protocol used by these databases for their own clients. It supports many different flavors of the protocol and three APIs to access it. FreeTDS includes call level interfaces for DB-Lib, CT-Lib, and ODBC. Security Fixes:...

CVE-2022-27584

Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby...

CVE-2022-27582

Password recovery vulnerability in SICK SIM4000 PPC Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and there...

CVE-2022-41657

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application programmable interfaces APIs. This could create arbitrary files, which could be used in API operations and could ultimately...

CVE-2022-43366

IP-COM EW9 V15.11.0.149732 allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version, setDebugCfg, and boot interfaces...

PT-2022-6953 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker ...

CVE-2022-43366

IP-COM EW9 V15.11.0.149732 allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version, setDebugCfg, and boot interfaces...

Juniper Junos OS DoS (JSA69873)

The version of Junos OS installed on the remote host is affected by a denial of service DoS vulnerability. On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping PHP nodes with link aggregation group LAG interfaces, an Improper...

Jenkins Plugin Pipeline: Supporting APIs 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin Pipeline:...

CVE-2022-22223

On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping PHP nodes with link aggregation group LAG interfaces, an Improper Validation of Specified Index, Position, or Offset in Input weakness allows an attacker sending certain IP packet...

CVE-2022-22223: Improper Validation of Specified Index, Position, or Offset in Input

On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping PHP nodes with link aggregation group LAG interfaces, an Improper Validation of Specified Index, Position, or Offset in Input weakness allows an attacker sending certain IP packet...

PT-2022-36632 · Mozilla · Firefox +2

Name of the Vulnerable Software and Affected Versions: SeaMonkey versions prior to 2.53.14 Description: This issue concerns updates and security fixes for SeaMonkey. The updates include changes to DOM HTML element interfaces such as Embed, Object, Anchor, and others. Additionally, there are fixes...

Security update for seamonkey (important)

openSUSE Security Update: Security update for seamonkey Announcement ID: openSUSE-SU-2022:10149-1 Rating: important References: 1203916 Affected Products: openSUSE Leap 15.4 An update that contains security fixes can now be installed. Description: This update fixes the following issues: Update to...

GSD-2022-1006560 net: enetc: deny offload of tc-based TSN features on VF interfaces

net: enetc: deny offload of tc-based TSN features on VF interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

PT-2022-34776 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue concerns the denial of offload of tc-based TSN features on VF interfaces. It was introduced in version v5.5 and fixed in version v5.19.12. The actual impact and attack plausibilit...