CVE-2022-25763 Improper input validation on HTTP/2 headers

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2...

PT-2022-20925 · Apache · Apache Traffic Server

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 9.1.2 Description: The issue is related to improper input validation in HTTP/2 header parsing, allowing an attacker to smuggle requests. Recommendations: For Apache Traffic Server versions 8.0.0...

PT-2022-10635 · Apache · Apache Traffic Server

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 9.1.2 Description: The issue is related to improper input validation in the header parsing of Apache Traffic Server, allowing an attacker to request secure resources. Recommendations: For Apache...

PT-2022-18829

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 9.1.2 Description The issue is related to improper input validation in HTTP/1.1 header parsing, allowing an attacker to send invalid headers. Recommendations For Apache Traffic Server versions 8.0.0...

CVE-2022-20239

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exectimetracker::getloops/Filesorttracker::reportuse/filesort...

PT-2022-14461 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue allows userspace to potentially map the kernel area to be writable, which can be easily exploited. This is because the 'remap pfn range' function may map out of size kern...

CVE-2022-2675

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...

Design/Logic Flaw

This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches the packet flow. This could allow a host with an...

CVE-2022-2675

The CVE-2022-2675 entry concerns Unitree Go 1 robotics platform (versions H0.1.7–H0.1.9; firmware 0.1.35) that can be powered down by an attacker within normal RF range without authentication. Root cause: unauthenticated RF-based shutdown capability reported across affected revisions. Connected P...

CVE-2022-2675 Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...

Unitree Go 1 安全漏洞

The Unitree Go 1 is a robotics dog from the Chinese company Unitree. A security vulnerability exists in the Unitree Go 1 robotics platform H0.1.7 and H0.1.9 and its accompanying firmware version 0.1.35, which originates from the fact that an attacker in the normal range of the RF can turn it off...

CVE-2022-2675

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...

The vulnerability in the implementation of the remap_pfn_range() function in Android kernel allows a hacker to trigger a service failure.

The vulnerability of the remappfnrange function in Android operating system kernels stems from the issue where the operation goes beyond the buffer boundaries in memory when processing the parameter vma-vmpageprot. Exploiting this vulnerability can allow a remote attacker to cause a service failu...

PostgreSQL JDBC Driver SQL注入漏洞

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, etc. The PostgreSQL JDBC Driver is an open source JDBC driver written in Pure...

Denial Of Service (DoS)

go is vulnerable to Denial Of Service DoS. The vulnerability exists because of an index out of range in Float.GobDecode which allows a malicious user to cause an application crash...

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...

mariadb: server crash in Item_args::walk_args

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemargs::walkargs...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A code execution vulnerability exists in Google Android, which is caused by kernel memory size mapping in remappfnrange. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2193)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...