CVE-2022-4269

A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action "mirred" a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TCP or SCTP does a...

CVE-2022-4269

A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action "mirred" a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TCP or SCTP does a...

CVE-2022-4269

A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action "mirred" a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TCP or SCTP does a...

soft-finder.de Cross Site Scripting vulnerability OBB-3072882

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2022-1006653 mm/kmemleak: prevent soft lockup in kmemleak_scan()'s object iteration loops

mm/kmemleak: prevent soft lockup in kmemleakscan's object iteration loops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-34908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.7 Description The issue is related to the kmemleak scan function in the Linux Kernel, which may cause a soft lockup in object iteration loops. The actual impact and attack plausibility have not yet been...

CVE-2022-44747

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44747

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

Privilege escalation

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44747

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44747

CVE-2022-44747 affects Acronis Cyber Protect Home Office for Windows prior to build 40107. The issue is a local privilege escalation caused by improper soft link handling in the product’s file/system access paths. Impact described across sources is elevated local privileges (local vector with low...

CVE-2022-44747

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44747: Externally Controlled Reference to a Resource in Another Sphere

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

PT-2022-27297 · Acronis · Acronis Cyber Protect Home Office

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office Windows versions prior to build 40107 Description: The issue is related to local privilege escalation due to improper soft link handling. Recommendations: For versions prior to build 40107, update to build...

Local privilege escalation due to improper soft link handling

...

Multiple vulnerabilities in FUJI SOFT network devices

Overview USB dongle +F FS040U and mobile routers +F FS020W/+F FS030W/+F FS040W provided by FUJI SOFT INCORPORATED contain multiple vulnerabilities listed below. Plaintext Storage of a Password CWE-256 - CVE-2022-43442 Cross-Site Request Forgery CWE-352 - CVE-2022-43470 Tomohisa Hasegawa of Canon ...

JVN#74285622: Multiple vulnerabilities in FUJI SOFT network devices

USB dongle +F FS040U and mobile routers +F FS020W/+F FS030W/+F FS040W provided by FUJI SOFT INCORPORATED contain multiple vulnerabilities listed below. Plaintext Storage of a Password CWE-256 - CVE-2022-43442 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

iKuai8 Command Injection Vulnerability

iKuai8 is a soft routing tool. iKuai8 suffers from a command injection vulnerability that is caused by an error in the iKuaiOS soft routing system. An attacker can exploit this vulnerability to execute arbitrary commands on the system...

CVE-2022-34326

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

CVE-2022-34326

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...