5551 matches found
PT-2022-29839
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.16.18 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and potential for attack have not been proven yet...
PT-2022-29532
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.16 through v5.17.1 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and attack plausibility have not yet been proven...
PT-2022-30634
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 4.19.237 Description The issue is related to an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and attack plausibility have not yet been proven...
PT-2022-30779
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and attack plausibility have not yet been proven...
PT-2022-30714
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 4.14.275 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and potential for attack have not been proven yet...
PT-2022-30533
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.4.188 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and potential for attack have not been proven yet...
Spock SLAF - A Shared Library Application Firewall "SLAF"
Spock SLAF is a Shared Library Application Firewall "SLAF". It has the purpose to protect any service that uses the OpenSSL library. The SLAF inserts hooking to intercept all communication to detect security anomalies and block and log attacks like buffer overflow, path traversal, XXE and SQL...
PT-2022-18886
Name of the Vulnerable Software and Affected Versions CleanTalk AntiSpam plugin versions = 5.173 Description The issue concerns a Reflected Cross-Site Scripting XSS vulnerability. It can be exploited via the page parameter in the /lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php file...
PT-2022-18885
Name of the Vulnerable Software and Affected Versions CleanTalk AntiSpam plugin versions = 5.173 Description The issue concerns a Reflected Cross-Site Scripting XSS vulnerability. It can be exploited via the page parameter in the /lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php file...
CVE-2022-28221: Improper Neutralization of Input During Web Page Generation
The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php...
CVE-2022-28222: Improper Neutralization of Input During Web Page Generation
The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php...
Unbreakable Enterprise kernel security update
5.4.17-2136.306.1.3 - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address Paolo Bonzini Orabug: 34053807 CVE-2022-1158 5.4.17-2136.306.1.2 - Revert 'rds/ib: recover rds connection from stuck rx path' Rohit Nair Orabug: 34045203 5.4.17-2136.306.1.1 - netfilter: nftables: initialize...
CVE-2022-27271
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
Remote code execution
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
CVE-2022-27271
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
CVE-2022-27271
CVE-2022-27271 affects InHand Networks InRouter 900 Industrial 4G Router. The vulnerability is an RCE via the python-lib component, triggered by a crafted packet. Affected firmware versions are prior to v1.0.0.r11700. Public sources in the connected documents (Red Hat, PT-Platform) corroborate th...
CVE-2022-27271: Improper Neutralization of Special Elements used in an OS Command
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...
CVE-2021-43138
In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues method, aka lib/internal/iterator.js createObjectIterator prototype pollution...
CVE-2021-43138: Improperly Controlled Modification of Object Prototype Attributes
In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues method, aka lib/internal/iterator.js createObjectIterator prototype pollution...