AZL-31287 CVE-2022-3162 affecting package kubernetes for versions less than 1.25.4-0

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...

UBUNTU-CVE-2022-3162

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...

CVE-2023-23512

The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Visiting a website may lead to an app denial-of-service...

CVE-2023-23504

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-48305

There is an identity authentication bypass vulnerability in Huawei Children Smart Watch Simba-AL00 1.1.1.274. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail...

CVE-2022-48305

There is an identity authentication bypass vulnerability in Huawei Children Smart Watch Simba-AL00 1.1.1.274. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail...

Authentication flaw

There is an identity authentication bypass vulnerability in Huawei Children Smart Watch Simba-AL00 1.1.1.274. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail...

CVE-2022-48305

There is an identity authentication bypass vulnerability in Huawei Children Smart Watch Simba-AL00 1.1.1.274. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail...

CVE-2022-48305

There is an identity authentication bypass vulnerability in Huawei Children Smart Watch Simba-AL00 1.1.1.274. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail...

Huawei WATCH Kid 安全漏洞

The Huawei Children Smart Watch is a children's watch from the Chinese company Huawei Huawei. The Huawei Children Smart Watch Simba-AL00 suffers from an Access Control Error vulnerability that can be exploited by an attacker to cause an application-specific access control to fail...

CVE-2022-48305

The CVE-2022-48305 entry concerns Huawei Children Smart Watch (Simba-AL00) running version 1.1.1.274 exhibiting an identity authentication bypass that can cause the access control function of specific applications to fail. Multiple sources (NVD, Red Hat advisory, CNVD/CNNVD mirrors, Huawei PSIRT)...

Stored Cross-Site Scripting (XSS)

changedetectionio is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in the watch list which allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter...

GHSA-68WJ-C2JW-5PP9 Stored cross site scripting in changedetection.io

Changedetection.io before 0.40.2 was discovered to contain a stored cross-site scripting XSS vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the "Add a new change detection...

PYSEC-2023-10

Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the "Add a new change detection...

Armenian Entities Hit by New Version of OxtaRAT Spying Tool

Entities in Armenia have come under a cyber attack using an updated version of a backdoor called OxtaRAT that allows remote access and desktop surveillance. "The tool capabilities include searching for and exfiltrating files from the infected machine, recording the video from the web camera and...

CVE-2023-24769

Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the "Add a new change detection...

SUSE CVE-2006-6501

Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function...

SUSE CVE-2008-0413

The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service crash and possibly trigger memory corruption via 1 a large switch statement, 2 certain uses of watch and eval, 3 certain uses of t...

SUSE CVE-2008-5182

The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount...

SUSE CVE-2009-2469

Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an defineSetter function, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted documen...