CVE-2022-47930

An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session...

tss-lib 安全漏洞

tss-lib is an open source IO FinNet implementation of the multi-party t,n- threshold ECDSA Elliptic Curve Digital Signature Algorithm based on Gennaro and Goldfeder 20201 and EdDSA Edwards Curve Digital Signature Algorithm. A security vulnerability exists in IO FinNet tss-lib versions prior to...

Medium: kernel

Issue Overview: A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action "mirred" a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TC...

Privilege Escalation

github.com/etcd-io/etcd is vulnerable to Privilege Escalation. The vulnerability exists due to improper authentication in v3server.go which allows an attacker to gain escalated privilege when the log level is set to debug...

I-O Data Device WFS-SR03 操作系统命令注入漏洞

I-O Data Device WFS-SR03 is a Wi-Fi storage for saving and playing photos and videos saved on cell phones and computers to SD cards, USB HDDs, etc. via Wi-Fi and USB from I-O Data Device Japan. A security vulnerability exists in I-O Data Device WFS-SR03 v1.0.3, which was discovered to contain a...

PT-2023-9518 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue is related to the IO default xsputn component and involves improper neutralization of special elements used in SQL commands. This can be exploited by a remote attacker to cause...

Jenkins Plugin Quay.io trigger 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an elevation of privilege vulnerability that stems from the lack of ctx-uringlock in the iofilegetfixed function, which could lead to a local elevatio...

CVE-2022-46793

Cross-Site Request Forgery CSRF vulnerability in AdTribes.Io Product Feed PRO for WooCommerce plugin = 12.4.4 versions...

SUSE CVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

PT-2023-15038 · Woocommerce · Adtribes.Io Product Feed Pro

Name of the Vulnerable Software and Affected Versions: AdTribes.Io Product Feed PRO for WooCommerce plugin versions = 12.4.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintend...

GHSA-GMPH-WF7J-9GCM Etcd-io Improper Authentication vulnerability

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function. This has been fixed in v.3.5.8 and was also backported to 3.4 and 3.5...

Etcd-io Improper Authentication vulnerability

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function. This has been fixed in v.3.5.8 and was also backported to 3.4 and 3.5...

CVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

AZL-26139 CVE-2021-28235 affecting package etcd for versions less than 3.5.4-6

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

CVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

CVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

Authentication flaw

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

CVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

CVE-2021-28235

CVE-2021-28235: Etcd-io v3.4.10 contains an authentication vulnerability that enables remote privilege escalation via the debug function. Documented impact is high (CVSS 9.8), with potential for elevated privileges on affected systems. Mitigation in connected sources advises upgrading to newer et...