1504 matches found
WEM Log displayed in VUEMRSAV.exe not showing correct order of external tasks
When using the VUEMRSAV.exe to determine the outcome of the WEM configuration for a user within the log the order in which the WEM external tasks are executing does not reflect the configured order in the WEM configuration set and also the actual order the external tasks are executing...
Command Injection
wwbn/avideo is vulnerable to Command Injection. The vulnerability exists because security.php does not escape shell characters, allowing an attacker to inject and execute malicious commands when embedding a video link...
PT-2023-18396 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...
Vdisk locks are not clearing after shutting down a target from the PVS console running in Azure
PVS on Azure - When shutting down a target from the PVS console or the Azure portal vdisk locks are not releasing properly...
GHSA-9F2C-XXFM-32MJ Duplicate of GHSA-4xh4-v2pq-jvhm
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4xh4-v2pq-jvhm. This link is maintained to preserve external references. Original Description The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the...
PT-2023-13630 · Unknown · Contacts Service
Name of the Vulnerable Software and Affected Versions: contacts service affected versions not specified Description: The issue is related to a missing permission check in the contacts service, which could lead to a local denial of service. No additional execution privileges are needed to exploit...
PT-2022-26532 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...
PT-2022-8333 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...
PT-2022-8380 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...
PT-2022-8360 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...
CVE-2022-3032
When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...
PT-2022-27785 · Tauri · Tauri
Name of the Vulnerable Software and Affected Versions: Tauri versions prior to the latest release Tauri versions 1.x prior to the backported patch Description: The filesystem glob pattern wildcards , ?, and ... match file path literals and leading dots by default, which unintentionally exposes su...
GHSA-RC58-QR9J-CPGW Apache Airflow Hive Provider vulnerable to Command Injection
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0...
Auto desktop launch feature is not working for receiver for web
The auto desktop launch feature is not working...
PYSEC-2022-43155
wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component opCallIndirect at /m3exec.h...
ASB-A-250470698
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-252943954
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...
Leak in Aliyun KeySecret
Users of this library will be affected when using this library, the incoming secret will be disclosed unintentionally...
GSD-2022-1007044 thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
thermal: intelpowerclamp: Use getcpu instead of smpprocessorid to avoid crash This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...