CVE-2022-28321

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pamaccess.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a...

PT-2022-33816 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to a crash due to stale SRB access around I/O timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34197 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.11 through 5.4.211 Description: A data-race issue exists around sysctl net busy poll. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.11 through 5.4.211,...

PT-2022-34392 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: A divide-by-zero bug was found in the ark set pixclock function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34180 · Linux · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM versions prior to v5.10.137 Linux Kernel versions 4.19 through 5.10.136 Description: The issue concerns a snapshot pre-VM-Enter BNDCFGS for the !nested run pending case in KVM's nVMX. The actual impact and attack plausibility have not yet...

PT-2022-34312 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to an oops in concurrently setting insn emulation sysctls on arm64. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2022-34384 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: A memory leak issue was discovered in the aa simple write to buffer function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34388 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue concerns a stack-out-of-bound access in SPMI tracing functions. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

CVE-2022-39215 The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri

Tauri is a framework for building binaries for all major desktop platforms. Due to missing canonicalization when readDir is called recursively, it was possible to display directory listings outside of the defined fs scope. This required a crafted symbolic link or junction folder inside an allowed...

CVE-2022-0029

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file...

Input validation

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file...

CVE-2022-0029 Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file...

CVE-2022-0029 Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file...

CVE-2022-0029

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file...

PT-2022-12962 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR agent affected versions not specified Description: An improper link resolution issue in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated...

Palo Alto Networks Cortex XDR 后置链接漏洞

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, Inc. in the United States. A security vulnerability exists in Palo Alto Networks Cortex XDR that stems from the presence of...

The vulnerability of the security.capability component in the QEMU hardware emulation software allows a attacker to compromise data integrity.

The vulnerability of the security.capability component in the QEMU hardware emulation software is related to improper storage of resolutions. Exploiting this vulnerability allows an attacker to compromise data integrity...

2022-09 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems (KB5017308)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

PT-2022-5623 · Microsoft · Windows Group Policy Preference Client +1

Name of the Vulnerable Software and Affected Versions: Windows Group Policy Preference Client affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability that allows attackers to affect the system. It is caused by improper link resolution before fi...

APSB22-40: Security updates available for Experience Manager

Adobe has released updates for Adobe Experience Manager AEM. These updates resolve vulnerabilities rated Important. Successful exploitation of these vulnerabilities could result in arbitrary code execution and security feature bypass...