TOTOLINK N350RT: Operating System Command Injection Vulnerability

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from a command injection issue in the hosttime parameter of the NTPSyncWithHost method...

CVE-2022-31237

Dell PowerScale OneFS, versions 9.2.0 up to and including 9.2.1.12 and 9.3.0.5 contain an improper preservation of permissions vulnerability in SyncIQ. A low privileged local attacker may potentially exploit this vulnerability, leading to limited information disclosure...

OPENSUSE-SU-2022:10087-1 Security update for opera

This update for opera fixes the following issues: opera was updated to 89.0.4447.71 - CHR-8957 Update chromium on desktop-stable-103-4447 to 103.0.5060.134 - DNA-100492 authPrivate.storeCredentials should work with running auth session - DNA-100649 “Sign out” from settings doesn’t also sign out...

Fedora: Security Advisory for owncloud-client (FEDORA-2022-d6faaa50eb)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: owncloud-client-2.10.1-1.fc35

Owncloud-client enables you to connect to your private ownCloud Server. With it you can create folders in your home directory, and keep the contents of those folders synced with your ownCloud server. Simply copy a file into the directory and the ownCloud Client does the rest...

[SECURITY] Fedora 36 Update: owncloud-client-2.10.1-1.fc36

Owncloud-client enables you to connect to your private ownCloud Server. With it you can create folders in your home directory, and keep the contents of those folders synced with your ownCloud server. Simply copy a file into the directory and the ownCloud Client does the rest...

Know Your ServiceNow and Qualys Integrations

If you are a current ServiceNow customer interested in cybersecurity, this blog is for you. If you are a Qualys customer who also uses ServiceNow, this blog is for you too. ServiceNow and Qualys have enjoyed a multi-year partnership, being two of the premier SaaS vendors covering the IT and...

PT-2022-14584 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to a missing permission check in the startSync method of AbstractThreadedSyncAdapter.java, which could allow access to protected content of content providers...

com.wilddog.client:wilddog-sync-android (>=2.0.1, <=2.0.4), com.wilddog.client:wilddog-video-android (>=0.5.2, <=0.5.4) +1 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (0.6.3)

io.socket:socket.io-client MAVEN version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - com.wilddog.client:wilddog-sync-android =2.0.1, =0.5.2, =0.6.6, =0.6.7 Source cves: CVE-2022-25867 Source...

com.bringg:ordertrack (>=1.1.5, <=1.1.15), com.wilddog.client:wilddog-auth-android (>=2.0.5, <=2.0.6) +6 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (0.8.2)

io.socket:socket.io-client MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - com.bringg:ordertrack =1.1.5, =2.0.5, =2.0.5, =0.5.5, =1.0.1-beta -...

WordPress plugin Stock Sync for WooCommerce has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2022-35922

Rust-WebSocket is a WebSocket RFC6455 library written in Rust. In versions prior to 0.26.5 untrusted websocket connections can cause an out-of-memory OOM process abort in a client or a server. The root cause of the issue is during dataframe parsing. Affected versions would allocate a buffer based...

CVE-2022-35922: Uncontrolled Resource Consumption

Rust-WebSocket is a WebSocket RFC6455 library written in Rust. In versions prior to 0.26.5 untrusted websocket connections can cause an out-of-memory OOM process abort in a client or a server. The root cause of the issue is during dataframe parsing. Affected versions would allocate a buffer based...

ASB-A-203229608

In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

PT-2022-32834

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32663

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-32961

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32446

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.18.12 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5...

io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45), org.jenkins-ci.plugins:github-oauth (>=0.25, <=0.33) +1 more potentially affected by CVE-2022-36884 via org.jenkins-ci.plugins:git (3.0.0)

org.jenkins-ci.plugins:git MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =y, =0.25, =0.33 - org.jenkins-ci.plugins:stash-pullrequest-build...

io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45), org.jenkins-ci.plugins:github-oauth (>=0.25, <=0.33) +1 more potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (3.0.0)

org.jenkins-ci.plugins:git MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =y, =0.25, =0.33 - org.jenkins-ci.plugins:stash-pullrequest-build...