CVE-2022-34972

So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the attvalueid , manuvalueid , optvalueid , and subcatevalueid parameters at /index.php?route=extension/module/sofiltershopby/filterdata...

CVE-2022-31116

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were decoded incorrectly. Besides corrupti...

UltraJSON 安全漏洞

UltraJSON is an open source, ultra-fast JSON encoder and decoder written in pure C and bundled with Python 3.7+. A security vulnerability exists in versions of UltraJSON prior to 5.4.0, which stems from an inability to properly decode certain characters, allowing for potential key obfuscation and...

openSUSE: Security Advisory for ImageMagick (SUSE-SU-2022:2259-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DEBIAN-CVE-2022-34265

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected...

PYSEC-2022-213

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected...

[SECURITY] Fedora 36 Update: golang-etcd-bbolt-1.3.6-4.fc36

Package Bbolt implements a low-level key/value store in pure Go. It supports fully serializable transactions, ACID semantics, and lock-free MVCC with multiple readers and a single writer. Bolt can be used for projects that want a simple data store without the need to add large dependencies such a...

that-value Regular Expression Denial of Service (ReDOS) Vulnerability

that-value is a multilingual platform validator package by the individual developer Paweł Stefański, Poland. A Regular Expression Denial of Service ReDOS vulnerability exists in that-value version v0.1.3, which can be exploited by an attacker to cause a denial of service when validating a crafted...

PT-2022-14446

Name of the Vulnerable Software and Affected Versions Android versions Android-12 through Android-12L Description The issue is related to a missing bounds check in the read attr value function of gatt db.cc, which could lead to a possible out of bounds write. This might result in remote code...

CVE-2022-33021

CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30...

The vulnerability of the WWebView component of MCE Systems’ mobile device lifecycle management system allows a hacker to execute arbitrary commands.

The vulnerability of MCE Systems’ WWebView component in mobile device lifecycle management systems lies in the lack of measures taken to neutralize special elements used by the operating system when processing the value parameter. Exploiting this vulnerability allows an attacker to execute...

The vulnerability of the Bluetooth Low Energy (BLE) implementation of the camera software for video conferencing, Meeting Owl Pro, allows a intruder to select passwords.

The vulnerability of the Bluetooth Low Energy BLE implementation of the Meeting Owl Pro camera’s microsoftware solution is related to a deficiency in processing the value "c": 10 when using the cryptographic algorithm SHA-1. Exploiting this vulnerability could allow an attacker to select password...

The vulnerability of the BIOS microprogramming system of Intel processors allows a hacker to gain unauthorized access to protected information.

The vulnerability of the BIOS microprogramming system of Intel processors is related to incorrect checking of the return value. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the `fuse_lib_readdir` function in the `libfuse-lite` library of the NTFS file system, which allows a attacker to execute arbitrary code with elevated privileges on the FUSE NTFS-3G module.

The vulnerability of the fuselibreaddir function in the libfuse-lite library of the NTFS file system for the FUSE NTFS-3G module is related to a numerical value loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a...

GSD-2022-1004029 staging: rtl8712: fix uninit-value in r871xu_drv_init()

staging: rtl8712: fix uninit-value in r871xudrvinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1003936 staging: rtl8712: fix uninit-value in r871xu_drv_init()

staging: rtl8712: fix uninit-value in r871xudrvinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003862 rtc: mt6397: check return value after calling platform_get_resource()

rtc: mt6397: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003819 staging: rtl8712: fix uninit-value in r871xu_drv_init()

staging: rtl8712: fix uninit-value in r871xudrvinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003678 staging: rtl8712: fix uninit-value in usb_read8() and friends

staging: rtl8712: fix uninit-value in usbread8 and friends This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003666 staging: rtl8712: fix uninit-value in r871xu_drv_init()

staging: rtl8712: fix uninit-value in r871xudrvinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...