3772 matches found
PT-2023-34416
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the return type of the baycom send packet function in the baycom epp module of the hamradio component. The actual impact and attack plausibility have not yet been proven...
PT-2023-34638
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue concerns a potential security vulnerability in the baycom epp module of the Linux Kernel. The problem is related to the return type of the baycom send packet function. The actual...
PT-2023-33660
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue concerns the return type of the baycom send packet function in the baycom epp module of the hamradio component. The actual impact and potential for attack have not been proven yet...
PT-2023-34540
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A race condition was found in the send packet function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.163, upda...
PT-2023-34237
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A race condition was found in the send packet function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.86, update...
PT-2023-33837
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 6.0.15 Description A race condition was found in the send packet function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version 2.6.35 and fixed in versio...
WS-2023-0008
Abusing the "$method" argument of Client::send, it was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url the one used in the Client constructor. This weakness only affects installations where all the following conditions...
GHSA-M95X-M25C-W9MP XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Abusing the $method argument of Client::send, it was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url the one used in the Client constructor. This weakness only affects installations where all the following conditions appl...
XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Abusing the $method argument of Client::send, it was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url the one used in the Client constructor. This weakness only affects installations where all the following conditions appl...
CVE-2022-4428
supporturi parameter in the WARP client local settings file mdm.xml lacked proper validation which allowed for privilege escalation and launching an arbitrary executable on the local machine upon clicking on the "Send feedback" option. An attacker with access to the local file system could use a...
PT-2023-33042 · Unknown · Xmlrpc Client
Name of the Vulnerable Software and Affected Versions: xmlrpc Client affected versions not specified Description: The issue allows an attacker to force the client to access local files or connect to undesired URLs instead of the intended target server's URL. This is possible by abusing the $metho...
PT-2023-10113 · Unknown · Vicamo Networkmanager
Name of the Vulnerable Software and Affected Versions: vicamo NetworkManager affected versions not specified Description: A problematic vulnerability has been found in vicamo NetworkManager. The issue affects the send arps function of the file src/devices/nm-device.c, leading to an unchecked retu...
PT-2023-12837 · Npm · Window-Control
Name of the Vulnerable Software and Affected Versions: window-control versions prior to 1.4.5 Description: The issue is related to Command Injection via the sendKeys function due to improper input sanitization. This affects an npm package that provides tools to manage window focus. Recommendation...
PT-2025-38050
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to inter-processor interrupts IPIs. Specifically, a NULL pointer dereference can occur in the irq data get affinity mask function when ipi send...
PT-2022-9030 · Openmrs · Openmrs Admin Ui Module
Name of the Vulnerable Software and Affected Versions: OpenMRS Admin UI Module versions up to 1.4.x Description: A problematic vulnerability has been found in the OpenMRS Admin UI Module, affecting the sendErrorMessage function of the AccountPageController.java file, part of the Account Setup...
PT-2022-5818
Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to a buffer overflow in the audin send open function of the xrdp server, which can be exploited by a remote attacker to gain access to a remote machine. xrdp is an open source...
GSD-2022-1007710 scsi: zfcp: Fix double free of FSF request when qdio send fails
scsi: zfcp: Fix double free of FSF request when qdio send fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...
PT-2022-36259 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: A potential memory leak was identified in the s3fwrn5 nci send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...
PT-2022-36144 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue is related to a double free of FSF request when qdio send fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...
PT-2022-36261 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: A potential memory leak was identified in the fdp nci send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v5.15.78,...