6659 matches found
UBUNTU-CVE-2021-44730
snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and...
CVE-2022-24983
Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique...
Path Traversal in prasathmani/tinyfilemanager
Description A Path Traversal vulnerability exists in Tiny File Manager, which allows the upload of files to an arbitrary location in the server. This flaw derives from the way that the file upload/creation is handled when a file with the same name already exists in the target directory. Affected...
Trend Micro Apex One 后置链接漏洞
Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. Trend Micro Apex One suffers from a backlink vulnerability that arises from an application not properly controlling the consumption of...
Samsung telephony information disclosure vulnerability (CNVD-2022-70759)
Samsung Telephony is a telephony feature of Samsung mobile devices. samsung telephony is vulnerable to an information disclosure vulnerability that results from a configuration error in the network system or product during operation. An attacker could use the vulnerability to obtain Cell Location...
Trend Micro Apex One 后置链接漏洞
Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. Trend Micro Apex One suffers from a backlink vulnerability that arises from an application not properly controlling the consumption of...
CVE-2022-22291
Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...
CVE-2022-22291
Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...
CVE-2022-22291
Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...
Code injection
Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...
CVE-2022-22291
Technical details about CVE-2022-22291 are not publicly provided in the connected documents. Available sources summarize a logging-related information disclosure in Samsung telephony, but do not specify affected versions, root cause, exploit details, or patches; monitor for updates.
CVE-2022-22291
Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...
Samsung telephony 安全漏洞
Samsung Telephony is a telephony feature of Samsung mobile devices. samsung telephony is vulnerable to an information disclosure vulnerability that results from a configuration error in the network system or product during operation. An attacker could use the vulnerability to obtain Cell Location...
CVE-2022-0521
Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2...
CVE-2022-0522
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...
CVE-2022-0522
CVE-2022-0522 concerns radare2/radare2.js: prior to 5.6.2, the NPM package allows access of memory location before the start of a buffer. Connected sources confirm this vulnerability is tied to radare2.js code paths and have led to vendor advisories and patch releases (e.g., radare2 5.6.4 and rel...
CVE-2022-0521 Access of Memory Location After End of Buffer in radareorg/radare2
Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2...
CVE-2022-0521 Access of Memory Location After End of Buffer in radareorg/radare2
Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2...
