Code injection

The HoYoVerse formerly miHoYo Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be...

CVE-2020-36603

Affected software: HoYoVerse (miHoYo) Genshin Impact mhyprot2.sys (driver) version 1.0.0.0. Issue: the anti-cheat driver does not adequately restrict unprivileged function calls, enabling local, unprivileged users to execute arbitrary code with SYSTEM privileges on Windows. Prerequisite: the driv...

CVE-2020-36603

The HoYoVerse formerly miHoYo Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be...

miHoYo Genshin Impact 安全漏洞

miHoYo Genshin Impact is an open-world action role-playing game by Chinese company miHoYo. A security vulnerability exists in miHoYo Genshin Impact mhyprot2.sys version 1.0.0.0, which stems from an unprivileged function call that is not sufficiently restricted. An attacker can exploit this...

PT-2022-9006 · Microsoft +1 · Windows +2

Name of the Vulnerable Software and Affected Versions: Genshin Impact mhyprot2.sys version 1.0.0.0 Description: The Genshin Impact mhyprot2.sys anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM...

CVE-2020-36603: Improper Privilege Management

The HoYoVerse formerly miHoYo Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be...

CVE-2022-32264

sys/netinet/tcptimer.h in FreeBSD before 7.0 contains a denial-of-service DoS vulnerability due to improper handling of TSopt on TCP connections. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2022-32264: Improper Handling of Exceptional Conditions

sys/netinet/tcptimer.h in FreeBSD before 7.0 contains a denial-of-service DoS vulnerability due to improper handling of TSopt on TCP connections. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

GHSA-9Q5J-JM53-V7VR lz4-sys vulnerable to memory corruption via issue in liblz4

lz4-sys up to v1.9.3 bundles a version of liblz4 that is vulnerable to CVE-2021-3520. Attackers could craft a payload that triggers an integer overflow upon decompression, causing an out-of-bounds write. The flaw has been corrected in version v1.9.4 of liblz4, which is included in lz4-sys 1.9.4...

lz4-sys vulnerable to memory corruption via issue in liblz4

lz4-sys up to v1.9.3 bundles a version of liblz4 that is vulnerable to CVE-2021-3520. Attackers could craft a payload that triggers an integer overflow upon decompression, causing an out-of-bounds write. The flaw has been corrected in version v1.9.4 of liblz4, which is included in lz4-sys 1.9.4...

Ubuntu: Security Advisory (USN-819-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2023-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RUSTSEC-2022-0051 Memory corruption in liblz4

lz4-sys up to v1.9.3 bundles a version of liblz4 that is vulnerable to CVE-2021-3520. Attackers could craft a payload that triggers an integer overflow upon decompression, causing an out-of-bounds write. The flaw has been corrected in version v1.9.4 of liblz4, which is included in lz4-sys 1.9.4...

Memory corruption in liblz4

lz4-sys up to v1.9.3 bundles a version of liblz4 that is vulnerable to CVE-2021-3520. Attackers could craft a payload that triggers an integer overflow upon decompression, causing an out-of-bounds write. The flaw has been corrected in version v1.9.4 of liblz4, which is included in lz4-sys 1.9.4...

Exploit for Improper Privilege Management in Wfs Heaven_Burns_Red

EvilWfshbr CVE-2022-42046https://vulners.com/cve/CVE-2022-...

PT-2022-23260 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6 Description: A remote code execution issue was found in sys info.php, allowing for potential code execution. Recommendations: For DedeBIZ version 6, consider restricting access to the sys info.php file until a patch is...

sqlite (>=0.19.7, <=0.21.1), sqlite3-sys (>=0.6.7, <=0.9.2) +3 more potentially affected by unknown CVE via temporary (0.5.1)

temporary CARGO version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on temporary and may be impacted: - sqlite =0.19.7, =0.6.7, =0.11.0, =0.2.6, =0.2.7 Source cves: unknown CVE Source advisory: OSV:GHSA-2JQ9-6XX7-3H29...

a3mo_lib (>=0.1.0, <=0.1.1), abacuz (0.1.1) +662 more potentially affected by CVE-2022-35737 via libsqlite3-sys (>=0.0.9, <=0.24.2)

libsqlite3-sys CARGO version =0.0.9, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.0.2, =0.2.11, =0.1.0, =1.0.0, =0.0.2-alpha, =0.1.0, =0.4.1 and more Source cves: CVE-2022-35737 Source advisory: OSV:GHSA-JW36-HF63-69R9...

a3mo_lib (>=0.1.0, <=0.1.1), abacuz (0.1.1) +662 more potentially affected by CVE-2022-35737 via libsqlite3-sys (>=0.0.9, <=0.24.2)

libsqlite3-sys CARGO version =0.0.9, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.0.2, =0.2.11, =0.1.0, =1.0.0, =0.0.2-alpha, =0.1.0, =0.4.1 and more Source cves: CVE-2022-35737 Source advisory: OSV:RUSTSEC-2022-0090...

RUSTSEC-2022-0090 `libsqlite3-sys` via C SQLite CVE-2022-35737

It was sometimes possible for SQLite versions = 1.0.12, 3.39.2 to allow an array-bounds overflow when large string were input into SQLite's printf function. As libsqlite3-sys bundles SQLite, it is susceptible to the vulnerability. libsqlite3-sys was updated to bundle the patched version of SQLite...