CVE-2022-20149: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A...

CVE-2022-20179: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A...

CVE-2022-20171: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A...

CVE-2022-20170: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A...

CVE-2022-20173: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A...

CVE-2022-20168: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A...

CVE-2022-20160: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A...

CVE-2022-20151: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A...

CVE-2022-20188: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A...

CVE-2022-20167: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A...

CVE-2022-20169: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A...

CVE-2022-20184: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A...

CVE-2022-2013: Undefined Security Weakness

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space...

CVE-2022-32511: Undefined Security Weakness

jmespath.rb aka JMESPath for Ruby before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable...

DEBIAN-CVE-2022-22577

An XSS Vulnerability in Action Pack = 5.2.0 and 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses...

CVE-2022-26727: Undefined Security Weakness

This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system...

CVE-2022-26708: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution...

GHSA-67FJ-6W6M-W5J8 Reversible One-Way Hash in io.github.javaezlib:JavaEZ

Impact This weakness allows the force decryption of locked text by hackers. The issue is NOT critical for non-secure applications, however may be critical in a situation where the highest levels of security are required. This issue ONLY affects v1.6 and does not affect anything pre-1.6. Upgrading...

curl: CVE-2022-32205: Set-Cookie denial of service

Summary: Curl fails to limit the number of cookies that can be set by a single host/domain. It can easily lead to a situation where constructing the request towards a host will end up consuming more than DYNHTTPREQUEST memory, leading to instant CURLEOUTOFMEMORY. Any host in a given domain can...

Anaconda3 操作系统命令注入漏洞

Anaconda3 is a distribution of the Python and R programming languages for scientific computing data science, machine learning applications, large-scale data processing, predictive analytics, etc. from the American company Anaconda. It is dedicated to simplifying package management systems and...