PT-2022-21905 · Debian +1 · Debian +1

Name of the Vulnerable Software and Affected Versions: Checkmk versions 1.6 through 1.6.9p29 Checkmk versions 2.0 through 2.0.0p26 Checkmk versions 2.1 through 2.1.0p3 Checkmk version 2.2.0i1 Description: A permission issue affects users that deployed the shipped version of the Checkmk Debian...

HUAWEI HarmonyOS has an unspecified vulnerability (CNVD-2022-66175)

HUAWEI HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS version 2.0 contains a security vulnerability that could be exploited by attackers to cause an integrity compromise...

HUAWEI HarmonyOS 安全漏洞

HUAWEI HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS version 2.0 contains a security vulnerability that could be exploited by attackers to cause an integrity compromise...

HCL Technologies BigFix Mobile/Modern Client Management 代码问题漏洞

HCL Technologies BigFix Mobile/Modern Client Management is a mobile device management software client from HCL Technologies, India. A security vulnerability exists in HCL Technologies BigFix Mobile/Modern Client Management v1.x, v2.0, which can be exploited by attackers to conduct Un-Auth XML...

GHSA-3QG4-2FCM-C8F9 Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members

Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated users to obtain sensitive address information by reading a full profile page...

GHSA-J3X5-CWFJ-PFCW Moodle does not force password changes for autosubscribed users

admin/uploaduserform.php in Moodle 2.0.x before 2.0.3 does not force password changes for autosubscribed users, which makes it easier for remote attackers to obtain access by leveraging knowledge of the initial password of a new user...

GHSA-W77P-8CFG-2X43 Improper Access Control in SLF4J

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta4 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J version 1.7.26 and later and in the 2.0.x series. Note tha...

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2022-1651)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled. CVE-2022-24303 Note that Tenabl...

Huawei HarmonyOS directory traversal vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A directory traversal vulnerability exists in the Applications module of Huawei HarmonyOS version 2.0, which provides a microkernel-based, full-scenario distribut...

Open virtual simulation experiment teaching management platform software 代码问题漏洞

Beijing Runnier Network Technology Open virtual simulation experiment teaching management platform software open virtual simulation experiment teaching management platform software is a management software for teaching by Beijing Runnier Network Technology Beijing Runnier Network Technology...

Huawei HarmonyOS Integer Overflow Vulnerability (CNVD-2022-44616)

Huawei HarmonyOS is an operating system from Huawei China. An integer overflow vulnerability exists in Huawei HarmonyOS version 2.0, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from incorrect input validation in the kernel module of...

CVE-2022-23060 Shopizer - Stored XSS in Manage Files

A Stored Cross Site Scripting XSS vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user attacker can inject malicious JavaScript in the filename under the “Manage files” tab...

Atom.CMS SQL注入漏洞

CMS is a content management system from The Digital Craft individual developers in the U.S. A SQL injection vulnerability exists in Atom.CMS version 2.0, which stems from a lack of validation of external input SQL statements in Atom.CMSadminuploads.php, which could be exploited to execute illegal...

CVE-2022-27658

SAP Innovation management 2.0 is affected by an access control error that could allow an attacker to access information not authorized for. This has been reported across multiple sources (NVD entry CVE-2022-27658 and related security advisories). The vulnerability description indicates informatio...

Huawei Smartphone out-of-bounds read vulnerability (CNVD-2022-47662)

Huawei Smartphone is a cell phone product launched by Huawei. Huawei Smartphone is vulnerable to an out-of-bounds read vulnerability in Huawei HarmonyOS, which is an all-scenario distributed operating system for the Internet of Everything. The vulnerability stems from an out-of-bounds read...

SAP Cloud Connector Path Traversal Vulnerability

SAP Cloud Connector is used to establish a secure connection between a computer and the SAP cloud platform. A path traversal vulnerability exists in SAP Cloud Connector version 2.0, which arises by allowing the upload of zip files as backups. Such backup files can be spoofed by injecting special...

Huawei Smartphone Business Logic Error Vulnerability

Huawei Smartphone is a cell phone product launched by Huawei. Huawei Smartphone is vulnerable to a business logic error. The vulnerability stems from a service logic vulnerability in a module in HarmonyOS version 2.0. An attacker could exploit the vulnerability to cause a persistent denial of...

Huawei Smartphone out-of-bounds read vulnerability

Huawei Smartphone is a cell phone product launched by Huawei. Huawei Smartphone is vulnerable to an out-of-bounds read vulnerability in Huawei HarmonyOS, which is an all-scenario distributed operating system for the Internet of Everything. The vulnerability stems from an out-of-bounds read...

Huawei Smartphone Input Validation Error Vulnerability

Huawei Smartphone is a cell phone product launched by Huawei. Huawei Smartphone is vulnerable to an input validation error. The vulnerability stems from an input validation error vulnerability in a module in HarmonyOS version 2.0. An attacker could exploit the vulnerability to cause a SAMGR heap...

Atom CMS Remote Code Execution Vulnerability

Atom CMS is a content management system. A remote code execution vulnerability exists in Atom CMS version 2.0, which stems from /admin/uploads.php failing to properly filter the special elements of the construct snippet. An attacker could exploit this vulnerability to cause arbitrary code executi...