PT-2025-26075

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock issue has been identified in the Linux kernel, specifically in the driver attach function. This issue arises when asynchronous probing is allowed, and due to...

PT-2025-8319

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue was found in the Linux kernel. The problem occurs when the driver attach function fails, causing the driver private to be freed while still being part of the...

GHSA-R83X-WJ75-V89R Nuclide Improper Input Validation

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

Nuclide Improper Input Validation

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

CVE-2022-24854

Metabase is an open source business intelligence and analytics application. SQLite has an FDW-like feature called ATTACH DATABASE, which allows connecting multiple SQLite databases via the initial connection. If the attacker has SQL permissions to at least one SQLite database, then it can attach...

CVE-2022-24854 Database bypassing any permissions in Metabase via SQlite attach

Metabase is an open source business intelligence and analytics application. SQLite has an FDW-like feature called ATTACH DATABASE, which allows connecting multiple SQLite databases via the initial connection. If the attacker has SQL permissions to at least one SQLite database, then it can attach...

CVE-2022-24854

Metabase is an open source business intelligence and analytics application. SQLite has an FDW-like feature called "ATTACH DATABASE", which allows connecting multiple SQLite databases via the initial connection. If the attacker has SQL permissions to at least one SQLite database, then it can attac...

Metabase 安全漏洞

Metabase is an open source data analytics platform from Metabase, Inc. in the United States. Metabase suffers from a security vulnerability that stems from the fact that SQLite has an FDW-like feature called ATTACH DATABASE that allows multiple SQLite databases to be connected via an initial join...

PT-2022-16928

Name of the Vulnerable Software and Affected Versions Metabase affected versions not specified Description The issue concerns Metabase, an open source business intelligence and analytics application, specifically affecting users who make use of SQLite. SQLite has a feature called ATTACH DATABASE,...

CVE-2022-24854: Externally Controlled Reference to a Resource in Another Sphere

Metabase is an open source business intelligence and analytics application. SQLite has an FDW-like feature called ATTACH DATABASE, which allows connecting multiple SQLite databases via the initial connection. If the attacker has SQL permissions to at least one SQLite database, then it can attach...

GSD-2022-1000490 drm/vc4: Fix deadlock on DSI device attach error

drm/vc4: Fix deadlock on DSI device attach error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000415 drm/vc4: Fix deadlock on DSI device attach error

drm/vc4: Fix deadlock on DSI device attach error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

PT-2022-28689

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description A potential issue exists in the drm/vc4 component of the Linux Kernel, related to a deadlock on DSI device attach error. The actual impact and attack plausibility have not yet been proven...

PT-2022-28764

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description A potential issue exists in the drm/vc4 component related to a deadlock on DSI device attach error. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

virglrenderer 安全漏洞

virglrenderer is a VirGL virtual OpenGL renderer. A security vulnerability exists in virglrenderer, which allows an attacker on a guest system to read memory fragments of virgl via VIRTIOGPUCMDRESOURCEATTACHBACKING to obtain sensitive information on the host system...

PT-2024-11809

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to a deadlock on DSI device attach error in the Linux kernel's drm/vc4 component. When a DSI device is attached to a DSI host, the host device's lock is held...

WordPress Download Manager Plugin Cross-Site Scripting (CVE-2021-24773)

A stored cross-site scripting vulnerability exists in Download Manager Plugin for WordPress. The vulnerability is due to insufficient sanitization of user-supplied data in Attach File section...

GHSA-R562-M862-63W3 APM Java Agent Local Privilege Escalation

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of...

APM Java Agent Local Privilege Escalation

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of...

CVE-2021-37941

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of...