CVE-2022-2653

The CVE-2022-2653 entry maps to a path traversal vulnerability in plankanban/planka (planka) that enables an attacker to read sensitive files such as configuration files and /proc/self/environ when the web server runs as root. Affected component is the web-accessible endpoint that uses a filename...

PT-2022-32443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.18.12 Description A data-race issue exists in the proc dou8vec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.13 through...

PT-2022-32837

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to data races in the proc douintvec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-32662

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to data-races in the proc dou8vec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32838

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to data races in the proc douintvec function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32449

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to data races in the proc douintvec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-32450

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to data races in the proc douintvec function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.8 and fixed in Linux...

PT-2022-32667

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to data races in the proc douintvec function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32666

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to data races in the proc douintvec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

Malicious code in proc-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59afad326fc37fe3e90463876138d8a2d3f252f2c8c52ac57ac2de831674beea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5467 Malicious code in proc-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59afad326fc37fe3e90463876138d8a2d3f252f2c8c52ac57ac2de831674beea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS Virtualization 2.10.1 : util-linux (EulerOS-SA-2022-2069)

According to the versions of the util-linux package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

UBUNTU-CVE-2022-2320

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...

PT-2025-8567

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data-race issue exists in the Linux kernel due to concurrent access of a sysctl variable. This issue can lead to load/store-tearing. The problem arises from the lack of protection for...

PT-2025-26132

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A pointer dereference issue exists in the emulation proc handler function within the ARM64 architecture support of the Linux kernel. When emulation proc handler is called concurrently wi...

PT-2022-1371 · Google +3 · Android Kernel +3

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a race condition in the emulation proc handler function of armv8 deprecated.c, which could lead to memory corruption. This may result in local escalation of privilege without requiring...

CVE-2022-20198

In llcpdlcprocconnectpdu of llcpdlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2018-17240: Missing Release of Memory after Effective Lifetime

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration e.g., username and password...

PT-2022-8038

Name of the Vulnerable Software and Affected Versions Netwave IP camera devices affected versions not specified Description The issue allows an unauthenticated attacker to exfiltrate sensitive information, such as username and password, from the network configuration of Netwave IP camera devices...

org.jenkins-ci.main:jenkins-test-harness (1.596.3), org.jenkins-ci.main:jenkins-war (1.596.3) +4 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.596.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.3 - org.jenkins-ci.main:jenkins-war 1.596.3 -...