CVE-2022-1292 The c_rehash script allows command injection

The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the...

Vulnerability in OpenSSL - The c_rehash script allows command injection

The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the...

PT-2022-3132 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of Network Address Translation NAT technology in Windows operating systems, which is associated with insufficient input data validation. This can ...

PT-2022-2984 · Microsoft · Windows Container Manager Service +1

Name of the Vulnerable Software and Affected Versions: Windows Container Manager Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Container Manager Service of Windows operating systems. It allows an attacker to elevate...

Vulnerability of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser, related to reading data beyond the buffer limit, allowing attackers to execute arbitrary code.

Vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser are related to reading data beyond the buffer limit. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code during the processing of malicious web content from a...

Cisco IOS XE AppNav-XE Denial of Service Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices.A denial-of-service vulnerability exists in Cisco IOS XE AppNav-XE, which can be exploited by attackers to cause the device to reload...

Cisco IOS XE Elevation of Privilege Vulnerability (CNVD-2022-55149)

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices.Cisco IOS XE has an elevation of privilege vulnerability that can be exploited by attackers to execute arbitrary commands as root...

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61348)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from the lack of filtering and escaping of user-submitted parameters for the Add User feature. An...

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61350)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from the lack of filtering and escaping of user-submitted parameters for the upload and download...

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61347)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from a lack of filtering and escaping of user-submitted parameters in the file management...

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61345)

Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. version 1.973 of Webmin contains a cross-site scripting vulnerability that stems from a lack of filtering and escaping in the scheduled Cron jobs feature. An attacker could use this...

Webmin Cross-site Request Forgery Vulnerability (CNVD-2022-61344)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.Webmin version 1.973 is vulnerable to cross-site request forgery, which stems from the lack of token validation for cross-site request forgery in the scheduled Cron job function. An...

Microsoft Windows Local Security Authority Subsystem Service 输入验证错误漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

PT-2022-2872 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Win32 Stream Enumeration component of Windows operating systems. This allows remote attackers to execute arbitrary code a...

PT-2022-2894 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Local Security Authority Subsystem Service LSASS of Windows operating systems...

Microsoft Windows Ancillary Function Driver for WinSock权限许可和访问控制问题漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock due to permission and access control issues. The following products and editions are...

PT-2022-2808

Name of the Vulnerable Software and Affected Versions U-Boot version 2022.01 Description The issue is related to a buffer overflow in the CONFIG IP DEFRAG function, which is responsible for IP packet defragmentation in U-Boot bootloaders for Linux-based embedded operating systems. This is caused ...

Samsung portable SSD T5 PC代码问题漏洞

Samsung portable SSD T5 PC is an official software for hard disks from Samsung South Korea. A security vulnerability exists in Samsung portable SSD T5 PC software prior to version 1.6.9, which originates from a DLL hijacking vulnerability that can be exploited by a local attacker to escalate...

Appneta Tcpreplay Buffer Overflow Vulnerability (CNVD-2022-29572)

Appneta Tcpreplay is the United States AppNeta Appneta company's set of UNIX-based operating system for editing and replaying network traffic open source utilities. Appneta Tcpreplay suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a heap overflow...

Appneta Tcpreplay Buffer Overflow Vulnerability

Appneta Tcpreplay is the United States AppNeta Appneta company's set of UNIX-based operating system for editing and replaying network traffic open source utilities. Appneta Tcpreplay suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a heap overflow...