12583 matches found
MGASA-2022-0322 Updated gstreamer1.0-plugins-good packages fix security vulnerability
It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. CVE-2022-1920, CVE-2022-1921 It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly use this...
JVN#48120704: Movable Type plugin A-Form vulnerable to cross-site scripting
Movable Type plugin A-Form provided by ARK-Web co., ltd. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who accessed the site using the product. Solution Update the Software Update A-Form to the latest version...
PT-2022-23677 · Unknown · Waterplugin
Name of the Vulnerable Software and Affected Versions: Waterplugin versions prior to 2.2.11.22081151 Description: The issue is related to an improper restriction of broadcasting Intent in the GalaxyStoreBridgePageLinker of the Waterplugin, which leaks the MAC address of the connected Bluetooth...
PT-2022-23682 · Samsung · Find My Mobile
Name of the Vulnerable Software and Affected Versions: Find My Mobile versions prior to 7.2.25.14 Description: The issue allows a local attacker to access the IMEI via log, resulting in exposure of sensitive information. Recommendations: For versions prior to 7.2.25.14, update to version 7.2.25.1...
PT-2022-24338 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/admin/video/list" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue...
PT-2022-24332 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/admin/friendlylink/list" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue. At the...
PT-2022-23655 · Samsung · Samsung Pass
Name of the Vulnerable Software and Affected Versions: Samsung pass versions prior to 4.0.03.1 Description: The issue is related to improper access control in Samsung pass, allowing physical attackers to access data on a certain state of an unlocked device. Recommendations: For versions prior to...
PT-2022-24192 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue allows LAN attackers to bypass distributed permission control, but to exploit this, attackers need another vulnerability to obtain system access. Recommendations: For OpenHarmony...
SUSE-SU-2022:3190-1 Security update for libEMF
This update for libEMF fixes the following issues: - CVE-2020-13999: Fixed an integer overflow that could lead to denial of service via a crafted file bsc1173070...
SUSE-SU-2022:3177-1 Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Add support for gpgautoimport in zypperpkg module - Update Salt to work with Jinja = and = 23.0.0 bsc1201082 - Add support for name, pkgs and diffattr parameters to upgrade function for zypper and yum bsc1198489 - Fix possible errors on...
PT-2022-23188 · Xwiki · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 12.5-rc-1 through 13.10.5 XWiki Platform versions 12.5-rc-1 through 14.3 Description: The XWiki Platform Mentions UI allows storing Javascript or groovy scripts in a mention, macro anchor, or reference field. The store...
PT-2022-20882 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.1 Description: The issue is related to improper restriction of rendered UI layers or frames, allowing attackers to perform clickjacking attacks. This can trick victims into performing actions such as entering...
SUSE-SU-2022:3144-1 Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2022-34903: Fixed a potential signature forgery via injection into the status line when certain unusual conditions are met bsc1201225...
PT-2022-24311 · Mtr +1 · Mtr +1
Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.8.6 MTR component version 1.0.4 Description: A cross-site scripting XSS issue was found in Nagios XI via the MTR component. This allows for potential malicious script execution. Recommendations: For Nagios XI version 5.8.6...
PT-2022-24310 · Nagios Xi · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.8.7 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in Nagios XI. These vulnerabilities are located at the auditlog.php endpoint. Recommendations: For versions prior to...
PT-2022-14128 · Sophos · Sophos Firewall
Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 18.5 MR4 Sophos Firewall versions prior to 19.0 MR1 Description: The issue concerns multiple SQL injection vulnerabilities in the Webadmin component of Sophos Firewall. These vulnerabilities can be exploited ...
PT-2022-20937 · Watchguard · Fireware Os +2
Name of the Vulnerable Software and Affected Versions: WatchGuard Firebox and XTM appliances versions prior to 12.1.4 WatchGuard Firebox and XTM appliances versions prior to 12.5.10 WatchGuard Firebox and XTM appliances versions prior to 12.8.1 Description: A stored cross-site scripting XSS issue...
PT-2022-20936 · Watchguard · Watchguard Firebox +2
Name of the Vulnerable Software and Affected Versions: WatchGuard Firebox and XTM appliances versions prior to 12.1.4 WatchGuard Firebox and XTM appliances versions prior to 12.5.10 WatchGuard Firebox and XTM appliances versions prior to 12.8.1 Description: A local attacker with shell access can...
PT-2022-20961 · Unknown · Openremote
Name of the Vulnerable Software and Affected Versions: OpenRemote versions prior to 1.0.5 Description: An issue in OpenRemote allows attackers to execute arbitrary code via a crafted Groovy rule. Recommendations: For OpenRemote versions prior to 1.0.5, update to version 1.0.5 or later to resolve...