CVE-2022-47629 affecting package libksba for versions less than 1.6.3-1

CVE-2022-47629 affecting package libksba for versions less than 1.6.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3872 affecting package qemu for versions less than 6.2.0-12

CVE-2022-3872 affecting package qemu for versions less than 6.2.0-12. A patched version of the package is available...

CVE-2022-4144 affecting package qemu for versions less than 6.2.0-12

CVE-2022-4144 affecting package qemu for versions less than 6.2.0-12. A patched version of the package is available...

CVE-2022-45939 affecting package emacs for versions less than 28.1-5

CVE-2022-45939 affecting package emacs for versions less than 28.1-5. A patched version of the package is available...

CVE-2007-6109 affecting package emacs for versions less than 28.1-5

CVE-2007-6109 affecting package emacs for versions less than 28.1-5. This CVE either no longer is or was never applicable...

CVE-2022-43551 affecting package curl for versions less than 7.86.0-2

CVE-2022-43551 affecting package curl for versions less than 7.86.0-2. A patched version of the package is available...

PT-2022-28032 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.5 Description: The issue is an Open Redirect in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the issue...

CVE-2022-40961

During startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially exploitable crash.This issue only affects Firefox for Android. Other operating systems are not affected.. This vulnerability affects Firefox 105...

CVE-2022-29910

When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 100...

CVE-2022-0517

Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN 2.7.1...

CVE-2022-45415

When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with that extension, leading to possible system compromise if the downloaded file was later ran. This vulnerability affects Firefox 107...

CVE-2022-3910 affecting package kernel for versions less than 5.15.82.1-1

CVE-2022-3910 affecting package kernel for versions less than 5.15.82.1-1. A patched version of the package is available...

CVE-2022-41849 affecting package kernel for versions less than 5.15.82.1-1

CVE-2022-41849 affecting package kernel for versions less than 5.15.82.1-1. A patched version of the package is available...

CVE-2022-2785 affecting package kernel for versions less than 5.15.82.1-1

CVE-2022-2785 affecting package kernel for versions less than 5.15.82.1-1. A patched version of the package is available...

CVE-2022-41895 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41895 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41880 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41880 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41900 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41900 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

PT-2022-36519 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue is related to a WARNING in the ip vs cleanup batch function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

Command injection

An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA...

CVE-2022-38802

Zkteco BioTime 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual log, time interval, attshift, and holiday. An authenticated administrator can read local files by exploiting XSS into a pdf generator when exporting data as a PDF...