Google Android competition conditions bug

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which arises from the concurrent execution of competing conditions in the GPU using incorrectly synchronized shared resources, and can be exploited by an attacker to remote...

MariaDB security vulnerabilities

MariaDB is a free and open source database management system from the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine.MariaDB has a security vulnerability that stems from a segmentation error found through the component stselectlexunit::excludelevel. No...

CVE-2022-33023

CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wrong...

New 'FabricScape' Bug in Microsoft Azure Service Fabric Impacts Linux Workloads

Cybersecurity researchers from Palo Alto Networks Unit 42 disclosed details of a new security flaw affecting Microsoft's Service Fabric that could be exploited to obtain elevated permissions and seize control of all nodes in a cluster. The issue, which has been dubbed FabricScape CVE-2022-30137,...

Motorola Solutions ACE1000 Authorization Issue Vulnerability

The Motorola Solutions ACE1000 is a Remote Terminal Unit RTU from Motorola USA. The Motorola Solutions ACE1000 RTU version suffers from an authorization issue vulnerability that stems from the fact that the affected product's SSH service is controlled by five pre-configured accounts, all of which...

Motorola Solutions ACE1000 data falsification vulnerability

The Motorola Solutions ACE1000 is a remote terminal unit from Motorola Solutions USA. A data forgery vulnerability exists in the Motorola Solutions ACE1000 version that originates from allowing custom applications to be installed via the STS software, the C Toolkit, or the ACE1000 Easy...

Motorola Solutions ACE1000 data falsification vulnerability

The Motorola Solutions ACE1000 is a remote terminal unit RTU from Motorola Solutions USA. The Motorola Solutions ACE1000 RTU is vulnerable to a data forgery issue, which arises from an attacker communicating with the Motorola ACE1000 RTU via SSH or Web UI, who could push a malicious firmware imag...

Espressif ESP-IDF buffer error vulnerability

Espressif ESP-IDF is an IoT development framework from China Lexin Information Technology Espressif.A memory corruption vulnerability exists in Espressif ESP-IDF, which stems from not checking the SegN field of the Transaction Start PDU, and can be exploited by an attacker during configuration to...

Jenkins cross-site scripting vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins JUnit Plugin 1119.vaa5e9068dad7...

Jenkins Plugin xUnit security vulnerabilities

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins Plugin xUnit 3.0.8 and earlier versions, which can be exploited by an attacker...

CVE-2022-23074

In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting XSS, in the ‘Name’ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger. A low privileged attacker will have the victim's API key and...

Cross site scripting

In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting XSS, in the ‘Name’ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger. A low privileged attacker will have the victim's API key and...

CVE-2022-23074

In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting XSS, in the ‘Name’ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger. A low privileged attacker will have the victim's API key and...

CVE-2022-23074: Improper Neutralization of Input During Web Page Generation

In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting XSS, in the ‘Name’ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger. A low privileged attacker will have the victim's API key and...

PT-2022-15832

Name of the Vulnerable Software and Affected Versions Recipes versions 0.17.0 through 1.2.5 Description The issue concerns Stored Cross-Site Scripting XSS in the 'Name' field of Keyword, Food, and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, such as "/Keyword" or "/Foo...

MAL-2022-6601 Malicious code in token-unit-es5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47a5022d856e0cd71649b175473b5cf7ff9192dfdcc69d01bdadf1ac9c05b7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in token-unit-es5

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in token-unit-es5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47a5022d856e0cd71649b175473b5cf7ff9192dfdcc69d01bdadf1ac9c05b7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2014-125019

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodenalunit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix thi...

PT-2022-7779

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability was found in the function decode nal unit of the component Slice Segment Handler, leading to memory corruption. The manipulation can be initiated remotely. Recommendations For FFmpeg version 2.0, ...