11558 matches found
CVE-2022-30239
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971...
AgileBits 1Password 安全漏洞
AgileBits 1Password For Mac is a password management software from AgileBits Canada. It is used to store a variety of different passwords. A security vulnerability exists in 1Password version 7.2.4 through versions prior to 7.9.3, which stems from the vulnerability of passwords to process...
NewStart CGSL CORE 5.05 / MAIN 5.05 : wpa_supplicant Vulnerability (NS-SA-2022-0038)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has wpasupplicant packages installed that are affected by a vulnerability: - A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could resul...
CVE-2021-20479
IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 197498...
PT-2022-19662 · Schedmd +2 · Schedmd Slurm +2
Name of the Vulnerable Software and Affected Versions: SchedMD Slurm versions 20.11.x through 21.08.x Description: The issue is related to Incorrect Access Control, which can lead to Escalation of Privileges. Recommendations: For SchedMD Slurm versions 20.11.x through 21.08.x, update to a version...
CVE-2022-20803
A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...
3loc (>=0.1.0, <=0.4.0), 3scale (0.2.0) +362 more potentially affected by CVE-2022-21144 via libxmljs (>=0.4.1, <=0.19.7)
libxmljs NPM version =0.4.1, =0.1.0, =4.0.1, =0.0.5, =0.1.0, =1.0.0, =0.0.0-development, =0.0.3, =1.3.0, =6.3.4, =0.2.0, =1.0.3-wmf.0, =0.1.2, =1.1.3-alpha.0, =1.1.5-wmf.0 - @leonardodino/freshbooks 2.0.0 and more Source cves: CVE-2022-21144 Source advisory: OSV:GHSA-773H-W45W-F2F9...
GitLab 输入验证错误漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An input validation error vulnerability exists in Gitlab Community Edition...
Apache NiFi 代码问题漏洞
Apache NiFi is a data processing and distribution system from the Apache Foundation in the United States. The system is primarily used for data routing, transformation, and system brokerage logic.A security vulnerability in Apache NiFi versions 0.0.1 through 1.16.0 stems from multiple components...
Use of Out-of-range Pointer Offset in vim/vim
...
Palantir Foundry Issues 日志信息泄露漏洞
Palantir is a data platform from Palantir, Inc. that reimagines how people use data by removing the barriers between back-end data management and front-end data analysis. A log message disclosure vulnerability exists in Palantir Foundry Issues service versions 2.244.0 through 2.249.0, which could...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1553)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-1591)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2022-0213 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0261...
GSD-2022-1001413 drm/amdkfd: svm range restore work deadlock when process exit
drm/amdkfd: svm range restore work deadlock when process exit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...
GSD-2022-1001136 KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU
KVM: x86/mmu: Zap all roots when unmapping gfn range in TDP MMU This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...
GSD-2022-1001077 drm/amdkfd: svm range restore work deadlock when process exit
drm/amdkfd: svm range restore work deadlock when process exit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...
Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32765)
Laurent Rineau CGAL is a Laurent Rineau open source application. Provides access to geometric algorithms in the form of C ++ libraries. A code execution vulnerability exists in Laurent Rineau CGAL, which can be exploited by an attacker to cause out-of-scope reads and type obfuscation via a...
Fedora 35 : vim (2022-e304fffd34)
The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e304fffd34 advisory. The newest upstream commit Security fixes for CVE-2022-1381, CVE-2022-1420 Tenable has extracted the preceding description block directly from the...
CVE-2022-1420
A vulnerability was found in Vim. The issue occurs when using a number in a string for the lambda name, triggering an out-of-range pointer offset vulnerability. This flaw allows an attacker to trick a user into opening a crafted script containing an argument as a number and then using it as a...
