GSD-2022-1003541 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

GSD-2022-1003287 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1002998 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002658 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-31804

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to the replacement of a mutex with mutex trylock on the panic notifier in the coresight cpu-debug component. The actual impact and attack plausibility have not yet been...

PT-2022-31261

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.13 through v5.17.14 Description The issue is related to the replacement of a mutex with mutex trylock on a panic notifier in the coresight cpu-debug component. The actual impact and attack plausibility have not yet bee...

PT-2022-32119

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the replacement of a mutex with mutex trylock on a panic notifier in the coresight cpu-debug component. The actual impact and attack plausibility have not yet been...

PT-2022-31550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the replacement of a mutex with mutex trylock on a panic notifier in the coresight cpu-debug component. The actual impact and attack plausibility have not yet been...

PT-2022-31993

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the replacement of a mutex with mutex trylock on a panic notifier in the coresight cpu-debug component. The actual impact and attack plausibility have not yet been...

PT-2022-32236

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to the replacement of a mutex with mutex trylock on a panic notifier in the coresight cpu-debug component. The actual impact and attack plausibility have not yet been...

PT-2023-13440 · Binutils +5 · Binutils +5

Name of the Vulnerable Software and Affected Versions: Binutils readelf version 2.38.50 Description: An issue was discovered in the function display debug names, allowing attackers to cause a denial of service through a reachable assertion failure. Recommendations: For Binutils readelf version...

Malicious Package

Overview @otto-ec/global-debug is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

WordPress plugin XML Sitemaps跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions prior to WordPress plugin XML Sitemaps 4.1.3,...

MAL-2022-6251 Malicious code in spotify-debug-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9edfda583c9114e1c2777cfff3dfac295df3fc155a65e3e1761a858e6dff9c2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spotify-debug-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9edfda583c9114e1c2777cfff3dfac295df3fc155a65e3e1761a858e6dff9c2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debuug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69aa06ab6c60cb148e879a031249af7e768eb28bd6dcd6a737cd12fdd5ee3c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rider-debug-visualizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ce0c44d9cec03b61e93b21730547c7f67365aae68f3e1dac44c5dfa8467985d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-25088

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2021-25088 Google XML Sitemaps < 4.1.3 - Admin+ Stored Cross-Site Scripting

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

USN-5486-1: Intel Microcode vulnerabilities

It was discovered that some Intel processors did not implement sufficient control flow management. A local attacker could use this to cause a denial of service. CVE-2021-0127 Joseph Nuzman discovered that some Intel processors did not properly initialise shared resources. A local attacker could u...