‼ CVE-2022-46318 ‼
📖 Read
via "National Vulnerability Database".
The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46317 ‼
📖 Read
via "National Vulnerability Database".
The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46310 ‼
📖 Read
via "National Vulnerability Database".
The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39166 ‼
📖 Read
via "National Vulnerability Database".
IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IBM X-Force ID: 235405.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46325 ‼
📖 Read
via "National Vulnerability Database".
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46319 ‼
📖 Read
via "National Vulnerability Database".
Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38733 ‼
📖 Read
via "National Vulnerability Database".
OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46856 ‼
📖 Read
via "National Vulnerability Database".
The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41596 ‼
📖 Read
via "National Vulnerability Database".
The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41590 ‼
📖 Read
via "National Vulnerability Database".
Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vulnerability affects the smartphone availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46320 ‼
📖 Read
via "National Vulnerability Database".
The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23542 ‼
📖 Read
via "National Vulnerability Database".
OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal security assessment, it was discovered that OpenFGA version 0.3.0 is vulnerable to authorization bypass under certain conditions. This issue has been patched in version 0.3.1 and is backward compatible.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46313 ‼
📖 Read
via "National Vulnerability Database".
The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone.📖 Read
via "National Vulnerability Database".
🕴 Give Yourself the Gift of Secure Holiday Ecommerce 🕴
📖 Read
via "Dark Reading".
Automating your defenses can bring good tidings of great joy.📖 Read
via "Dark Reading".
Dark Reading
Give Yourself the Gift of Secure Holiday E-Commerce
Automating your defenses can bring good tidings of great joy.
‼ CVE-2022-42949 ‼
📖 Read
via "National Vulnerability Database".
Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47629 ‼
📖 Read
via "National Vulnerability Database".
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-42046 ‼
📖 Read
via "National Vulnerability Database".
WFS, Inc HeavenBurnsRed 2020.3.15.7141260 is vulnerable to Local Privilege Escalation.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24431 ‼
📖 Read
via "National Vulnerability Database".
All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4617 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25929 ‼
📖 Read
via "National Vulnerability Database".
The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting (XSS) due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38546 ‼
📖 Read
via "National Vulnerability Database".
A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unauthenticated attacker to access the DNS server when the device is switched to the AP mode.📖 Read
via "National Vulnerability Database".