MAL-2022-2923 Malicious code in exporting-ref-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c85877779d24911c119e2efc1fa59b688c166a71c97b0537c4dbc6af25ba7a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ref-client-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf19b642e7b2ecb13e2b7b0b395605636b74380541b56309a5693b48bed81428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5729 Malicious code in ref-client-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf19b642e7b2ecb13e2b7b0b395605636b74380541b56309a5693b48bed81428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-83GG-PWXF-JR89 `array!` macro is unsound in presence of traits that implement methods it calls internally

Affected versions of this crate called some methods using auto-ref. The affected code looked like this. rust let mut arr = $crate::core::mem::MaybeUninit::uninit; let mut vec = $crate::ArrayVec::::newarr.asmutptr as mut T; In this case, the problem is that asmutptr is a method of &mut MaybeUninit...

`array!` macro is unsound in presence of traits that implement methods it calls internally

Affected versions of this crate called some methods using auto-ref. The affected code looked like this. rust let mut arr = $crate::core::mem::MaybeUninit::uninit; let mut vec = $crate::ArrayVec::::newarr.asmutptr as mut T; In this case, the problem is that asmutptr is a method of &mut MaybeUninit...

PT-2022-36974

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash involves the dwg ref get object, dwg geojson feature, and dwg geojson...

GSD-2022-1001803 net/sched: act_ct: fix ref leak when switching zones

net/sched: actct: fix ref leak when switching zones This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001771 scsi: qla2xxx: Implement ref count for SRB

scsi: qla2xxx: Implement ref count for SRB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001487 net/sched: act_ct: fix ref leak when switching zones

net/sched: actct: fix ref leak when switching zones This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001169 net/sched: act_ct: fix ref leak when switching zones

net/sched: actct: fix ref leak when switching zones This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29343

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.3 Description The issue is related to a use-after-free detection in the ref tracker. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-36952

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as ref stack counttomark, zcounttomark, and gs interpret. No...

PT-2022-29096

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.105 Description The issue is related to the xen/netfront component, specifically with handling failures in the gnttab end foreign access ref function. The actual impact and potential for attacks have not be...

PT-2022-29168

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.234 Description The issue is related to the xen/netfront component, which fails to react properly to failing gnttab end foreign access ref calls. The actual impact and attack plausibility have not yet been...

PT-2022-29190

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.271 Description The issue is related to the xen/netfront component, specifically with handling failures in the gnttab end foreign access ref function. The actual impact and potential for attack have not bee...

PT-2022-29210

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.306 Description The issue is related to the xen/netfront component, specifically with handling failures of the gnttab end foreign access ref function. The actual impact and potential for attack have not been...

PT-2022-29143

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.184 Description The issue is related to the xen/netfront component, specifically with handling failures in the gnttab end foreign access ref function. The actual impact and potential for attacks have not bee...

PT-2022-28959

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.14 Description The issue is related to the xen/netfront component, specifically with handling failures of the gnttab end foreign access ref function. The actual impact and potential for attacks have not bee...

PT-2022-29030

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.28 Description The issue is related to the xen/netfront component, which does not properly react to failing gnttab end foreign access ref calls. The actual impact and attack plausibility have not yet been...

CVE-2022-0410

The WP Visitor Statistics Real Time Traffic WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection...