2442 matches found
ZZCMS SQL Injection Vulnerability (CNVD-2022-58903)
zzcms Webmaster Merchants Content Management System, developed by the zzcms team, incorporates database optimization, content caching, AJAX and other technologies to make the site's security, stability, and load capacity is reliably guaranteed. The source code is open and the functional modules a...
‘Unpacking’ technical attribution and challenges for ensuring stability in cyberspace
Introduction When reports of a cyberattack appear in the headlines, questions abound regarding who launched it and why. Even if an attacker has what are to it perfectly rational reasons for conducting such an attack, these reasons are often known only to them. The rest of the world, including the...
Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 2 (7.5.3-407)
The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 3 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-140018 Unable to set an IP address to containers based on the vzlinux-stream-9-x8664 and centos-stream-9-x8664 templates. Vulnerability id: PSBM-140305...
OSV-2021-1818 Null-dereference READ
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47847 Crash type: Null-dereference READ Crash state: NULL...
CVE-2022-28948
A flaw was found in the Unmarshal function in Go-Yaml. This vulnerability results in program crashes when attempting to convert or deserialize invalid input data, potentially impacting system stability and reliability...
CVE-2022-31481
An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP seri...
Design/Logic Flaw
An authenticated attacker can send a specially crafted route to the “editroute.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303...
Virtuozzo Hybrid Infrastructure 5.1 (5.1.0-206)
In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance service providers' interoperability and help to expand their services. The improvements cover compute services, security, core storage, and the user interface. Additionally, this release delivers...
[Important] [Security] Virtuozzo ReadyKernel patch 142.0 for Virtuozzo Hybrid Server 7.0, 7.5
The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.x. Vulnerability id: CVE-2022-0492 3.10.0-1127.8.2.vz7.158.8 to 3.10.0-1160.53.1.vz7.185.3 Setting releaseagent could potentially lead to privilege...
CVE-2022-22252
The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...
CVE-2022-22252
The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...
CVE-2022-22252
The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...
Spoofing
The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...
CVE-2022-22252
The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...
CVE-2022-22252
CVE-2022-22252 involves Huawei HarmonyOS DFX module and is described as a use-after-free (UAF) vulnerability that can affect system stability. The NVD entry lists a CVSS v3.1 base score of 7.5 (Network vector, low attack complexity, no user interaction, high impact on availability) and notes an i...
PT-2022-15300 · Huawei · Hwlog
Name of the Vulnerable Software and Affected Versions: Huawei HWLog affected versions not specified Description: The DFX module has a Use-After-Free UAF vulnerability. Successful exploitation of this vulnerability may affect system stability. Recommendations: At the moment, there is no informatio...
Cisco RV340 SSL VPN Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco RV340 SSL VPN Unauthenticated Remote Code Execution', 'Description' = %q This module exploits a stack buffer overflow in the Cisco RV serie...
kernel: i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
A flaw was found in the Linux kernel's drivers for Intel i40e network interfaces that could cause system stability issues when writing statistics for specific hardware to debugfs...
SUSE: Security Advisory (SUSE-SU-2022:1582-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:1577-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.1.0 ESR. Fixed: Various stability, functionality, and security fixes MFSA 2021-40 bsc1190269, bsc1190274: CVE-2021-38492: Navigating to mk: URL scheme could load Internet Explor...