GSD-2022-1004462 iio: trigger: sysfs: fix use-after-free on remove

iio: trigger: sysfs: fix use-after-free on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

GSD-2022-1004254 iio: trigger: sysfs: fix use-after-free on remove

iio: trigger: sysfs: fix use-after-free on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...

PT-2022-33151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.286 Description The issue is related to a use-after-free error in the sysfs trigger of the Linux Kernel. This error was introduced in version v3.7 and fixed in version v4.14.286. The actual impact and attac...

PT-2022-33003

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.202 Description The issue is related to a use-after-free error in the sysfs trigger of the iio subsystem. This problem was introduced in version v3.7 and is fixed in version v5.4.202. The actual impact and...

PT-2022-32516

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue is related to a use-after-free error in the sysfs trigger of the iio subsystem. This problem was introduced in version v3.7 and is fixed in Linux Kernel version v5.18.8. The actual...

PT-2022-33200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.321 Description The issue is related to a use-after-free error in the sysfs trigger of the iio subsystem. This problem was introduced in version v3.7 and is fixed in version v4.9.321. The actual impact and...

PT-2022-33089

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.250 Description The issue is related to a use-after-free error in the sysfs trigger of the Linux Kernel. This problem was introduced in version v3.7 and is fixed in version v4.19.250. The actual impact and...

PT-2022-32724

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.51 Description The issue is related to a use-after-free error in the sysfs trigger of the iio subsystem. This problem was introduced in version v3.7 and is fixed in version v5.15.51. The actual impact and...

PT-2022-32887

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.127 Description The issue is related to a use-after-free error in the sysfs trigger of the iio subsystem. This problem was introduced in version v3.7 and is fixed in version v5.10.127. The actual impact and...

CVE-2022-36984

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could remotely trigger a denial of service attack against a...

Lack of authentication mechanism in Jenkins Git Plugin webhook

Git Plugin provides a webhook endpoint at /git/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. For its most basic functionality, this endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. In Gi...

GHSA-V878-67XW-GRW2 Lack of authentication mechanism in Jenkins Git Plugin webhook

Git Plugin provides a webhook endpoint at /git/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. For its most basic functionality, this endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. In Gi...

Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. A sequence of...

GHSA-JJ8J-6JQ7-GMVH Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. A sequence of...

CVE-2022-36914

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

CVE-2022-36914

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

CVE-2022-36914

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

CVE-2022-36882

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

CVE-2022-36883

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

CVE-2022-36882

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...