6663 matches found
Emerging best practices for securing cloud-native environments
Globally, IT experts recognise security as the most significant barrier to cloud adoption, in part because many of the ways of securing traditional IT environments are not always applicable to cloud-native infrastructure. As a result, security teams may find themselves behind the curve and...
OESA-2022-1978 uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: nfslookupreply in net/nfs.c in Das U-Boot through 2022.04 and through 2022.07-rc2 has an...
USN-5678-1 linux-aws, linux-gcp-4.15 vulnerabilities
It was discovered that the SUNRPC RDMA protocol implementation in the Linux kernel did not properly calculate the header size of a RPC message payload. A local attacker could use this to expose sensitive information kernel memory. CVE-2022-0812 Moshe Kol, Amit Klein and Yossi Gilad discovered tha...
The vulnerability of the file-sharing software for disconnected desktops, Warpinator, arises from an improper definition of the link before accessing files. This allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the file-sharing software between remote desktops in Warpinator relates to the improper handling of links before accessing files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Altair HyperView Player 安全漏洞
Altair HyperView Player is a standalone 3D viewer from Altair Japan. It is used to share CAE models and simulation results. A security vulnerability exists in Altair HyperView Player that originates from uninitialized memory...
Warpinator 后置链接漏洞
Warpinator is an open source file sharing library for Linux Mint that shares files across a LAN. Files are sent and received over the local network. A security vulnerability exists in Warpinator that stems from allowing access to directories other than those intended, such as symbolic directory...
IBM Robotic Process Automation Access Control Error Vulnerability (CNVD-2022-68277)
IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. An Access Control Error vulnerability exists in IBM Robotic Process Automation...
MISP 信息泄露漏洞
MISP is an open source software solution. It is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. information leakage vulnerability exists in versions of MISP prior to 2.4.164, which stems...
PT-2022-26520
Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.164 Description The issue allows attackers to discover role names, which is information that should only be accessible to the site admin. Recommendations For versions prior to 2.4.164, update to version 2.4.164 or...
CVE-2022-39877
Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...
CVE-2022-39877
Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...
CVE-2022-39865
Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...
Improper access control
Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...
CVE-2022-39877
Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...
PT-2022-25069 · Unknown · Group Sharing
Name of the Vulnerable Software and Affected Versions: Group Sharing versions prior to 13.0.6.15 Description: The issue is related to improper access control in ProfileSharingAccount within Group Sharing, allowing attackers to identify the device. This can occur in Android versions S12 and below,...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 1.7.89.0, which stems from an improper access control vulnerability in...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices is a series of Samsung mobile devices, including cell phones, tablets, etc. SAMSUNG Mobile devices Android S12 before 13.0.6.15, Android R11 13.0.6.14 has an access control error vulnerability, which originates from the existence of access control in ProfileSharingAccount i...
CVE-2022-39877
CVE-2022-39877: Affected is Samsung Group Sharing’s ProfileSharingAccount. The root cause is improper access control in ProfileSharingAccount in Group Sharing, affecting Android S (12) prior to 13.0.6.15 and Android R (11) prior to 13.0.6.14 (and below). The vulnerability allows an attacker to id...