PT-2023-2201 · Eclipse · Eclipse Birt

Name of the Vulnerable Software and Affected Versions: Eclipse BIRT versions 2.6.2 through 4.12 Description: The issue is related to insufficient input validation when processing host headers with the report parameter. This could allow a remote attacker to gain unauthorized access to protected...

Microsoft Defender for Cloud Management Port Exposure Confusion

Prior to March 9, 2023, Microsoft Defender for Cloud incorrectly marked some Azure virtual machines as having secured management ports including SSH port 22/TCP, RDP port 3389/TCP and WINRM port 5985/TCP, when in fact one or more of these ports were exposed to the internet. This occured when the...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 111, which stems from an issue in Firefox when accessing restricted streams requires checking that the number of available bytes is i...

7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +265 more potentially affected by CVE-2022-43441 via sqlite3 (>=5.0.0, <=5.1.4)

sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =0.0.15, =0.0.15, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =6.1.4, =6.1.4, =7.0.1, =6.1.4, =0.1.3-alpha.0, =0.3.0 and more Source cves: CVE-2022-43441 Source advisory: OSV:GHSA-JQV5-7XPX-QJ74...

CVE-2022-31474

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1...

PT-2023-21225 · Maddy · Maddy

Name of the Vulnerable Software and Affected Versions: maddy versions 0.2.0 through 0.6.2 Description: The issue allows for a full authentication bypass if a SASL authorization username is specified when using the PLAIN authentication mechanisms. Instead of validating the specified username, it i...

CVE-2022-25709

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg...

CVE-2022-25694

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

Memory corruption

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

Jenkins 跨站脚本漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins versions 2.270 through 2.393. An attacker exploited the vulnerability to execu...

Debian: Security Advisory (DLA-383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-45-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-25709

CVE-2022-25709 describes a memory corruption in the data modem caused by using an out-of-range pointer offset while processing a QMI message. The vulnerability is tracked across multiple sources (NVD, Red Hat, CVE listings) and is categorized as High severity with local attack vector and local pr...

CVE-2022-25694 Use of Out-of-range Pointer Offset in MODEM

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

CVE-2022-25694 Use of Out-of-range Pointer Offset in MODEM

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

CVE-2022-25694

CVE-2022-25694: A memory corruption issue in a Qualcomm MODEM component caused by an out-of-range pointer offset in UIM. Affected item is a Qualcomm closed-source component; CVSSv3.1 metrics indicate LOCAL access, LOW privileges required, no user interaction, and HIGH impact on confidentiality, i...

PT-2023-12793 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to memory corruption in the Modem due to the usage of an out-of-range pointer offset in UIM. Recommendations: At the moment, there is no information about a newer version...

PT-2023-12796 · Qualcomm · Snapdragon +64

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in a modem due to the use of an out-of-range pointer offset while processing a qmi message. No information is...

PT-2023-14927 · Arm · Arm Mali Gpu Kernel Driver

Name of the Vulnerable Software and Affected Versions: Arm Mali GPU Kernel Driver versions Midgard r0p0 through r32p0 Arm Mali GPU Kernel Driver versions Bifrost r0p0 through r41p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r41p0 Arm Mali GPU Kernel Driver version Avalon r41p0...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Rack vulnerabilities (USN-5910-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5910-1 advisory. It was discovered that Rack did not properly structure regular expressions in some of its parsing components, which...