GSD-2022-1002361 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...

GSD-2022-1002260 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1002106 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001876 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001566 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001259 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29532

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.16 through v5.17.1 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and attack plausibility have not yet been proven...

PT-2022-30779

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and attack plausibility have not yet been proven...

PT-2022-29839

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.16.18 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and potential for attack have not been proven yet...

PT-2022-30634

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 4.19.237 Description The issue is related to an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and attack plausibility have not yet been proven...

PT-2022-30714

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 4.14.275 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and potential for attack have not been proven yet...

PT-2022-30379

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.10.109 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and potential for attack have not been proven yet...

PT-2022-30533

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.16 through 5.4.188 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and potential for attack have not been proven yet...

PT-2022-30149

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns an uninitialized flag for AV/C deferred transactions in the firewire-lib component of ALSA. The actual impact and attack plausibility have not yet been proven...

Spock SLAF - A Shared Library Application Firewall "SLAF"

Spock SLAF is a Shared Library Application Firewall "SLAF". It has the purpose to protect any service that uses the OpenSSL library. The SLAF inserts hooking to intercept all communication to detect security anomalies and block and log attacks like buffer overflow, path traversal, XXE and SQL...

PT-2022-18886

Name of the Vulnerable Software and Affected Versions CleanTalk AntiSpam plugin versions = 5.173 Description The issue concerns a Reflected Cross-Site Scripting XSS vulnerability. It can be exploited via the page parameter in the /lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php file...

CVE-2022-28221: Improper Neutralization of Input During Web Page Generation

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php...

CVE-2022-28222: Improper Neutralization of Input During Web Page Generation

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php...

PT-2022-18885

Name of the Vulnerable Software and Affected Versions CleanTalk AntiSpam plugin versions = 5.173 Description The issue concerns a Reflected Cross-Site Scripting XSS vulnerability. It can be exploited via the page parameter in the /lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php file...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.7-alpha-1) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.7-alpha-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...