podman security update

1.6.4-32.0.1 - Reduce unnecessary writable mounts in NaiveDiffDriver Orabug: 31025483 - handle redirect from the docker registry v2 Orabug: 29874238 [email protected] - remove changes in NaiveDiffDriver 1.6.4-32 - update to the latest content of...

Debian DLA-2992-1 : openvpn - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2992 advisory. - OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-013)

The version of kernel installed on the remote host is prior to 5.4.50-25.83. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-013 advisory. A logic bug flaw was found in the Linux kernel's implementation of SSBD. A bug in the logic handling allows a...

CVE-2022-29936: Deserialization of Untrusted Data

USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java deserialization. NOTE: this is not an Oracle Corporation product...

New YVault depositors can be attacked by depressing share decimals

Lines of code Vulnerability details Impact An attacker can become the first depositor for a recently created YVault contract, providing a tiny amount of token by calling deposit1 raw values here, 1 is 1 wei, 1e18 is 1 token if it is 18 decimals. Then the attacker can directly transfer, for exampl...

SUSE-SU-2022:1164-1 Security update for go1.16

This update for go1.16 fixes the following issues: Update to version 1.16.15 bsc1182345: - CVE-2022-24921: Fixed a potential denial of service via large regular expressions bsc1196732. Non-security fixes: - Fixed an issue with v2 modules go51331. - Fixed an issue when building source in riscv64...

多款 Xiongmai 产品安全漏洞

The Xiongmai AHB7008T-MH-V2, among others, is a hard disk recorder DVR from Xiongmai Technology Xiongmai, a Chinese company. A security vulnerability exists in multiple Xiongmai products that originates from an open port 9530. An unauthenticated attacker can make an arbitrary Telnet connection to...

CVE-2021-43663

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component cloudupdatecheck...

CVE-2021-43661

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /home.asp...

CVE-2022-25008

totolink EX300v2 V4.0.3c.140B20210429 and EX1200T V4.1.2cu.5230B20210706 does not contain an authentication mechanism...

CVE-2021-43664

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo...

CVE-2019-12266

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32...

CVE-2019-12266

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32...

CVE-2019-12266 Stack buffer overflow in Wyze Cam Pan v2, Cam v2 and Cam v3

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32...

PT-2022-11882

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version V4.0.3c.140 B20210429 totolink A720R version V4.1.5cu.470 B20200911 Description The issue causes uncontrolled resource consumption. Recommendations For totolink EX300 v2 version V4.0.3c.140 B20210429, at the moment,...

PT-2022-11881

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version 4.0.3c.140 B20210429 Description A reflected cross-site scripting XSS issue was found in the /home.asp component. Recommendations For version 4.0.3c.140 B20210429, as a temporary workaround, consider restricting acces...

PT-2022-17042

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version 4.0.3c.140 B20210429 totolink EX1200T version 4.1.2cu.5230 B20210706 Description The issue is related to the lack of an authentication mechanism in the affected devices. Recommendations For totolink EX300 v2 version...

PT-2022-11884

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version 4.0.3c.140 B20210429 Description The issue is related to a command injection vulnerability via the component process forceugpo. Recommendations For totolink EX300 v2 version 4.0.3c.140 B20210429, consider disabling th...

PT-2022-11883

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version 4.0.3c.140 B20210429 Description A command injection issue was found in the cloudupdate check component, which could potentially be exploited. Recommendations For version 4.0.3c.140 B20210429, consider restricting...

CVE-2019-9564: Improper Authentication

A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32...