PT-2022-8663

Name of the Vulnerable Software and Affected Versions IrfanView version 4.54 Description The issue allows a user-mode write access violation. This occurs at the FORMATS!GetPlugInInfo+0x0000000000007e62 location. Recommendations For IrfanView version 4.54, at the moment, there is no information...

PT-2022-8669

Name of the Vulnerable Software and Affected Versions IrfanView version 4.54 Description The issue allows a user-mode write access violation. This occurs starting at FORMATS!ShowPlugInSaveOptions W+0x0000000000007f4b. Recommendations For IrfanView version 4.54, at the moment, there is no...

PT-2022-8661

Name of the Vulnerable Software and Affected Versions IrfanView version 4.54 Description The issue allows a user-mode write access violation. This occurs starting at FORMATS!GetPlugInInfo+0x0000000000007e82. Recommendations For IrfanView version 4.54, at the moment, there is no information about ...

CVE-2020-23557: Out-of-bounds Write

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x000000000000755d...

PT-2022-8667

Name of the Vulnerable Software and Affected Versions IrfanView version 4.54 Description The issue allows a user-mode write access violation. This occurs at the FORMATS!GetPlugInInfo+0x0000000000007e28 location. Recommendations For IrfanView version 4.54, at the moment, there is no information...

CVE-2020-23556: Out-of-bounds Write

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28...

CVE-2020-23559: Out-of-bounds Write

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x0000000000007d7f...

多款Schneider Electric产品授权问题漏洞

Schneider Electric EcoStruxure Control Expert formerly Unity Pro and Schneider Electric EcoStruxure Process Expert are both products of Schneider Electric, a French company. Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric logic controller...

CVE-2022-36093

XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. By passing a template of the distribution wizard to the xpart template, user accounts can be created even when user registration is disabled. This also circumvents any email verification. Before versions 14.2...

CVE-2022-32743

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it...

CVE-2022-2639

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

PT-2022-23370

Name of the Vulnerable Software and Affected Versions pulp ansible affected versions not specified Description The issue concerns the storage of tokens in plaintext by the collection remote for pulp ansible, instead of utilizing pulp's encrypted field. These tokens are exposed in read/write mode...

CVE-2022-32743: Incorrect Default Permissions

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.2)

The version of AOS installed on the remote host is prior to 5.19.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.2 advisory. - Perl before 5.30.3 has an integer overflow related to mishandling of a PLregkindOPn == NOTHING situation. A crafted regular...

CVE-2022-2590

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system...

VulnCheck KEV: CVE-2020-36193

PEAR ArchiveTar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party...

CVE-2022-36310

Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-2590

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system...

UBUNTU-CVE-2022-2590

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system...

CVE-2022-2095

An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious authenticated user to view a public project's Deploy Key's public fingerprint a...