CVE Vulnerability

CVE-2022-25267

by

Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files).

CVE-2022-25266

by

Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files).

CVE-2022-25265

by

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.

CVE-2022-25264

by

In JetBrains TeamCity before 2021.2.3, environment variables of the “password” type could be logged in some cases.

CVE-2022-25263

by

JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.

CVE-2022-25262

by

In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.