Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-2257)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2257)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5539-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5539-1 advisory. It was discovered that the implementation of the 6pack and mkiss protocols in the Linux kernel did not handle detach events properly in some...

ALPINE-CVE-2022-33745

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / val...

DEBIAN-CVE-2022-33745

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / val...

CVE-2022-33745

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / val...

UBUNTU-CVE-2022-33745

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / val...

CVE-2022-33745

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / val...

CVE-2022-33745: Undefined Security Weakness

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / val...

CVE-2022-31395

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

CVE-2022-31395

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

CVE-2022-31395

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 路径遍历漏洞

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware is firmware for an Algo 8373 IP Zone Paging Adapter from Algo Communication Products Ltd. of Canada. A security vulnerability exists in Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware version 1.7.6. An...

CVE-2022-31395

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

CVE-2022-31395

Summary: CVE-2022-31395 affects Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6. The vulnerability arises in the device’s web-access interface, where a directory traversal can be performed via a request to /fm-data.lua, potentially allowing access to unintended files. ...

CVE-2022-31395: Improper Limitation of a Pathname to a Restricted Directory

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

MAL-2022-5194 Malicious code in paging-no-iterators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3eae428e53762c38a1d877c0c449ef27da77ba57941e7c6bb72b9769d54fe81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paging-no-iterators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3eae428e53762c38a1d877c0c449ef27da77ba57941e7c6bb72b9769d54fe81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paging-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a43eb2b5d0447bd346e2faf45bbba6e4e84ab509378ccd5e69a33cb0cf9e6c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5195 Malicious code in paging-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a43eb2b5d0447bd346e2faf45bbba6e4e84ab509378ccd5e69a33cb0cf9e6c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...