Tag: NVD
-
CVE-2022-24448 – An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an applicati …
An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a …
-
CVE-2021-46671 – options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses …
options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote …
-
CVE-2022-23329 – A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcm …
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary …
-
CVE-2022-23330 – A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4 …
A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code …
-
CVE-2022-24348 – Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm cha …
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in …
-
CVE-2013-20003 – Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may u …
Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, …
-
CVE-2018-25029 – The Z-Wave specification requires that S2 security can be downgraded to S0 or other less s …
The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within …
-
CVE-2020-12891 – AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivile …
AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL …
-
CVE-2020-12965 – When combined with specific software sequences, AMD CPUs may transiently execute non-canon …
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 …
-
CVE-2020-12966 – AMD EPYCâ„¢ Processors contain an information disclosure vulnerability in …
AMD EPYCâ„¢ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with …
-
CVE-2020-7534 – A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, …
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or …
-
CVE-2021-21959 – A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect …
A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. This misconfiguration significantly …
●●●