8996 matches found
PT-2022-34549
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.326 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendations...
PT-2022-34348
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendation...
PT-2022-34461
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendation...
PT-2022-34397
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue is related to a refcount leak in the qcom smd parse edge function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...
Parse Server vulnerable to brute force guessing of user sensitive data via search patterns
Impact Internal fields keys used internally by Parse Server, prefixed by and protected fields user defined can be used as query constraints. Internal and protected fields are removed by Parse Server from query results and are only returned to the client using a valid master key. However, using...
GHSA-2M6G-CRV8-P3C6 Parse Server vulnerable to brute force guessing of user sensitive data via search patterns
Impact Internal fields keys used internally by Parse Server, prefixed by and protected fields user defined can be used as query constraints. Internal and protected fields are removed by Parse Server from query results and are only returned to the client using a valid master key. However, using...
DEBIAN-CVE-2022-40149
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...
GHSA-PQW5-JMP5-PX4V parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing
parse-url prior to 8.1.0 is vulnerable to Misinterpretation of Input. parse-url parses certain http or https URLs incorrectly, identifying the URL's protocol as ssh. It may also parse the host name incorrectly...
parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing
parse-url prior to 8.1.0 is vulnerable to Misinterpretation of Input. parse-url parses certain http or https URLs incorrectly, identifying the URL's protocol as ssh. It may also parse the host name incorrectly...
pasbeaucoupmoinsrave (0.2.0) potentially affected by CVE-2022-3224 via parse-url (8.0.0)
parse-url NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - pasbeaucoupmoinsrave 0.2.0 Source cves: CVE-2022-3224 Source advisory: OSV:GHSA-PQW5-JMP5-PX4V...
PT-2022-33419 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A NULL pointer dereference issue exists in the dev parse header protocol function when skb-dev is null. This issue was introduced in version v5.12 and is fixed in Linux Kernel version v5.19....
PT-2022-33324
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.19.4 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendations F...
PT-2022-33717
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.63 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendations...
CVE-2022-3224
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0...
CVE-2022-3224
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0...
Design/Logic Flaw
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0...
CVE-2022-3224 Misinterpretation of Input in ionicabizau/parse-url
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0...
CVE-2022-3224
CVE-2022-3224 concerns the parse-url npm package by ionică Bizău, affected in versions prior to 8.1.0. The root cause is a misinterpretation of input that leads to incorrect parsing of http/https URLs (e.g., misclassifying the URL protocol as ssh and misparsing the hostname). Reported impacts inc...
