SUSE CVE-2014-1891

Multiple integer overflows in the 1 FLASKGETBOOL, 2 FLASKSETBOOL, 3 FLASKUSER, and 4 FLASKCONTEXTTOSID suboperations in the flask hypercall in Xen 4.3.x, 4.2.x, 4.1.x, 3.2.x, and earlier, when XSM is enabled, allow local users to cause a denial of service processor fault via unspecified vectors, ...

CVE-2022-47366

CVE-2022-47366 concerns the wlan driver, where a missing bounds check enables an out-of-bounds write. The vulnerability could cause a local denial of service in wlan services. Documents consistently describe the issue, but do not provide concrete product versions, patches, or mitigations within t...

CVE-2022-47322: Integer Overflow or Wraparound

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-36925: Use of Hard-coded Cryptographic Key

Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism. The encryption key used for IPC between the Zoom Rooms daemon service and the Zoom Rooms client was generated using parameters that could be obtained by a local low-privileged application. That key ca...

CVE-2022-44437: Missing Authorization

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2022-38684: Missing Authorization

In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2022-44422: Missing Authorization

In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2022-20449: Improper Limitation of a Pathname to a Restricted Directory

In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a path traversal error. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-39134: Concurrent Execution using Shared Resource with Improper Synchronization

In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel...

CVE-2022-45640: Out-of-bounds Write

Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service local...

CVE-2022-3577: Missing Release of Memory after Effective Lifetime

An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigbenprobe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben...

CVE-2022-39128: Uncontrolled Resource Consumption

In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...

CVE-2022-39123: Uncontrolled Resource Consumption

In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...

CVE-2022-20438: Undefined Security Weakness

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259920...

CVE-2022-20439: Undefined Security Weakness

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172...

CVE-2022-20437: Undefined Security Weakness

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242258929...

CVE-2022-20440: Undefined Security Weakness

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259918...

CVE-2022-28637

A local Denial of Service DoS and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for...

CVE-2022-28637

A local Denial of Service DoS and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for...

CVE-2022-28637: Undefined Security Weakness

A local Denial of Service DoS and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for...