CVE-2022-0184

The CVE-2022-0184 issue affects KING JIM’s TEPRA PRO SR5900P and SR-R7900P label printers (SR5900P ≤1.080; SR-R7900P ≤1.030). The vulnerability is an insufficiently protected credentials flaw that could allow an attacker on an adjacent network to obtain credentials used to connect to the device’s...

The vulnerability of the Ruby interpreter, related to the insertion or modification of arguments, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ruby programming language interpreter is related to the introduction or modification of arguments. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

JVN#81479705: Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials

Label printers "TEPRA" PRO SR5900P / SR-R7900P provided by KING JIM CO.,LTD. contain an insufficiently protected credentials vulnerability CWE-522. Impact An attacker who can access the products via network may obtain credentials to connect to the Wi-Fi access point with the infrastructure mode...

haproxy: an HTTP method name may contain a space followed by the name of a protected resource

haproxy has an input validation flaw that could allow a remote attacker to bypass implemented security restrictions. An HTTP method name may contain a space followed by the name of a protected resource. Given this, It is possible that an server would interpret this as a request for that protected...

The vulnerability of the “Remote Assistance” tool for Windows operating systems, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the “Remote Assistance” tool for Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow unauthorized actors who operate remotely to gain unauthorized access to protected information...

The vulnerability of the configuration monitoring panel of the device for collecting information about devices on the Cisco Common Services Platform Collector allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configuration monitoring panel of the Cisco Common Services Platform Collector, which is used to collect information about devices in the network, is related to insufficient checking of uploaded files. Exploiting this vulnerability could allow a malicious actor to gain...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling an attacker to gain unauthorized access to protected information.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Adobe Photoshop graphic editor arises from an operation that allows data to escape out of the buffer, allowing a hacker to disclose protected information.

The vulnerability of the Adobe Photoshop graphic editor arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the WebAuthentication user authentication mechanism in Google Chrome allows a hacker to disclose protected information.

The vulnerability of the WebAuthentication user authentication mechanism of Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the microprogrammed Wi-Fi router software of RBK352, RBR350, and RBS350 lies in the exposure of resources in the unauthorized area, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the microprogrammed Wi-Fi router software of RBK352, RBR350, and RBS350 is related to the exposure of resources to an unauthorized area. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

PT-2022-1564 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an information disclosure in the Windows GDI component, which can allow a remote attacker to gain unauthorized access to protected information. This can potentially...

PT-2022-1529 · Microsoft · Windows Defender +1

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to a security feature bypass that may allow attackers to access protected information. This could potentially enable unauthorized access to sensitive data. The...

The vulnerability of the Google Chrome browser’s Background Fetch API interface, related to the disclosure of information in the erroneous data area, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Background Fetch API programming interface in Google Chrome browsers is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the GDI+ graphic library in Microsoft Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the GDI+ graphics library in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-2422

Name of the Vulnerable Software and Affected Versions follow-redirects affected versions not specified Description The issue is related to errors in handling cookies, which can allow a remote attacker to gain unauthorized access to protected information. This can lead to exposure of private...

The vulnerability of the Google Chrome browser’s Background Fetch API programming interface, related to the disclosure of information in the erroneous data area, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Background Fetch API programming interface in Google Chrome browsers is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

haproxy: an HTTP method name may contain a space followed by the name of a protected resource

haproxy has an input validation flaw that could allow a remote attacker to bypass implemented security restrictions. An HTTP method name may contain a space followed by the name of a protected resource. Given this, It is possible that an server would interpret this as a request for that protected...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows attackers to disclose protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Netgear RAX43 has an unspecified vulnerability (CNVD-2022-02648)

Netgear RAX43 is a wireless router from Netgear USA.A security vulnerability exists in Netgear RAX43, which stems from the use of hard-coded credentials. Because the configuration backup is encrypted, it appears that an ordinary user is not intended to be able to manipulate the configuration...

Hardcoded credentials

Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted. This encryption is accomplished via a password-protected zip file with a hardcoded password...