CVE-2022-31163

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source,...

PT-2022-20578 · Tzinfo +3 · Tzinfo +3

Name of the Vulnerable Software and Affected Versions: TZInfo versions prior to 0.3.61 TZInfo versions 1.0.0 to 1.2.9 when used with the Ruby data source TZInfo version 0.3.60 and earlier Description: The issue is related to relative path traversal in the TZInfo Ruby library, which provides acces...

DNSSECImpl.verifySignature compares strings incorrectly, allowing malicious zones to forge DNSSEC trust chain

Lines of code Vulnerability details Impact DNSSEC allows parent zones to sign for its child zones. To check validity of a signature, RFC4034 3.1.7 requires the Signer's Name in any RRSIG RDATA to contain the zone of covered RRset. This requirement is reasonable since any child zone should be...

[SECURITY] Fedora 35 Update: golang-github-cloudflare-0.17.0-3.fc35

A Go library for interacting with Cloudflare's API v4. This library allows you to: - Manage and automate changes to your DNS records within Cloudflare - Manage and automate changes to your zones domains on Cloudflare, includi ng adding new zones to your account - List and modify the status of WAF...

GSD-2022-1003744 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003552 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003010 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

libtimezonemap bug fix and enhancement update

An update is available for libtimezonemap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtimezonemap packages contain a time zone map widget for the GTK...

libtimezonemap bug fix and enhancement update

An update is available for libtimezonemap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtimezonemap packages contain a time zone map widget for the GTK...

CVE-2020-21161

Cross Site Scripting XSS vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0...

CommScope Ruckus Wireless ZoneDirector 跨站脚本漏洞

CommScope Ruckus Wireless ZoneDirector is a centrally managed Smart Wireless LAN WLAN system from CommScope USA. A security vulnerability exists in Ruckus Wireless ZoneDirector version 9.8.3.0. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the...

CVE-2022-31395

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 路径遍历漏洞

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware is firmware for an Algo 8373 IP Zone Paging Adapter from Algo Communication Products Ltd. of Canada. A security vulnerability exists in Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware version 1.7.6. An...

CVE-2022-31395

Summary: CVE-2022-31395 affects Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6. The vulnerability arises in the device’s web-access interface, where a directory traversal can be performed via a request to /fm-data.lua, potentially allowing access to unintended files. ...

CVE-2022-31395

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

PT-2022-20729

Name of the Vulnerable Software and Affected Versions Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware version 1.7.6 Description The issue allows attackers to perform a directory traversal via a web request sent to "/fm-data.lua". This could potentially lead to unauthorized...

CVE-2022-31395: Improper Limitation of a Pathname to a Restricted Directory

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

...

A malicious zone operator can piggyback other transactions, when a caller tries to fulfill the restricted order

Lines of code Vulnerability details If an order has a restricted order type and, if the caller is other than the offerer or zone, then a staticcall to isValidOrder on the zone is made. This call outside the Seaport contract opens up a possible misuse by the zone contract implementation. The zone...

ffmpeg Path Traversal Code Execution

The vulnerability of the ffmpeg software used by ZoneMinder involves incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the host with the software running...