Lucene search
+L

5666 matches found

osv_gsd
osv_gsd
•added 2022/06/28 6:36 p.m.•19 views

GSD-2022-1003010 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

7.2AI score
SaveExploits0
Rockylinux
Rockylinux
•added 2022/06/28 12:32 p.m.•25 views

libtimezonemap bug fix and enhancement update

An update is available for libtimezonemap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtimezonemap packages contain a time zone map widget for the GTK...

0.7AI score
SaveExploits0
Rockylinux
Rockylinux
•added 2022/06/28 12:29 p.m.•19 views

libtimezonemap bug fix and enhancement update

An update is available for libtimezonemap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtimezonemap packages contain a time zone map widget for the GTK...

0.7AI score
SaveExploits0
osv_cve
osv_cve
•added 2022/06/27 3:15 p.m.•15 views

CVE-2020-21161

Cross Site Scripting XSS vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0...

6.1CVSS5.8AI score0.00711EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/06/27 12:00 a.m.•16 views

CommScope Ruckus Wireless ZoneDirector 跨站脚本漏洞

CommScope Ruckus Wireless ZoneDirector is a centrally managed Smart Wireless LAN WLAN system from CommScope USA. A security vulnerability exists in Ruckus Wireless ZoneDirector version 9.8.3.0. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the...

6.1CVSS6.3AI score0.00711EPSS
SaveExploits1References4
NVD
NVD
•added 2022/06/23 5:15 p.m.•30 views

CVE-2022-31395

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

9CVSS0.02825EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/06/23 12:00 a.m.•22 views

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 路径遍历漏洞

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware is firmware for an Algo 8373 IP Zone Paging Adapter from Algo Communication Products Ltd. of Canada. A security vulnerability exists in Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware version 1.7.6. An...

9CVSS8AI score0.02825EPSS
SaveExploits1References2
CVE
CVE
•added 2022/06/22 1:34 p.m.•97 views

CVE-2022-31395

Summary: CVE-2022-31395 affects Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6. The vulnerability arises in the device’s web-access interface, where a directory traversal can be performed via a request to /fm-data.lua, potentially allowing access to unintended files. ...

9CVSS8.5AI score0.02825EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/06/22 1:34 p.m.•39 views

CVE-2022-31395

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

8.8AI score0.02825EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/22 12:00 a.m.•10 views

CVE-2022-31395: Improper Limitation of a Pathname to a Restricted Directory

Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua...

9CVSS7.9AI score0.02825EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/22 12:00 a.m.•9 views

PT-2022-20729

Name of the Vulnerable Software and Affected Versions Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware version 1.7.6 Description The issue allows attackers to perform a directory traversal via a web request sent to "/fm-data.lua". This could potentially lead to unauthorized...

9CVSS0.02825EPSS
SaveExploits1References3
Microsoft CVE
Microsoft CVE
•added 2022/06/14 7:00 a.m.•11 views

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

...

7.5CVSS6.8AI score0.03344EPSS
SaveExploits1
Code423n4
Code423n4
•added 2022/06/03 12:00 a.m.•20 views

A malicious zone operator can piggyback other transactions, when a caller tries to fulfill the restricted order

Lines of code Vulnerability details If an order has a restricted order type and, if the caller is other than the offerer or zone, then a staticcall to isValidOrder on the zone is made. This call outside the Seaport contract opens up a possible misuse by the zone contract implementation. The zone...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/06/03 12:00 a.m.•18 views

ffmpeg Path Traversal Code Execution

The vulnerability of the ffmpeg software used by ZoneMinder involves incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the host with the software running...

9.1CVSS6AI score
SaveExploits0References1Affected Software1
osv_alpine
osv_alpine
•added 2022/06/02 2:15 p.m.•8 views

ALPINE-CVE-2022-27775

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead...

7.5CVSS6.3AI score0.03344EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/06/02 2:15 p.m.•9 views

DEBIAN-CVE-2022-27775

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead...

7.5CVSS6.6AI score0.03344EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•10 views

CVE-2022-27775

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead...

7.5CVSS5.9AI score0.03344EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/02 12:00 a.m.•8 views

CVE-2022-27775: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead...

7.5CVSS6.5AI score0.03344EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
•added 2022/06/01 12:00 a.m.•12 views

CVE-2022-27775

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead...

6.8AI score0.03344EPSS
SaveExploits1References4
CVE
CVE
•added 2022/06/01 12:00 a.m.•356 views

CVE-2022-27775

Curl contains an information‑disclosure flaw (CVE-2022-27775) in versions 7.65.0–7.82.0 where an IPv6 address from the pool could be reused with a different zone id, enabling potential leakage through connection reuse. Affected platforms in connected advisories indicate curl/libcurl fixes have be...

7.5CVSS7.1AI score0.03344EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder