65 matches found
AZL-59879 CVE-2025-22005 affecting package kernel for versions less than 6.6.85.1-2
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhcpcpurthoutput in fibchecknhv6gw. fibchecknhv6gw expects that fib6nhinit cleans up everything when it fails. Commit 7dd73168e273 "ipv6: Always allocate pcpu memory in a fib6nh" moved fibnhcommoninit before...
CVE-2025-22005
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhcpcpurthoutput in fibchecknhv6gw. fibchecknhv6gw expects that fib6nhinit cleans up everything when it fails. Commit 7dd73168e273 "ipv6: Always allocate pcpu memory in a fib6nh" moved fibnhcommoninit before...
CVE-2025-22005 ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhcpcpurthoutput in fibchecknhv6gw. fibchecknhv6gw expects that fib6nhinit cleans up everything when it fails. Commit 7dd73168e273 "ipv6: Always allocate pcpu memory in a fib6nh" moved fibnhcommoninit before...
CVE-2025-22005
The CVE-2025-22005 issue, fixed in the Linux kernel, is a memleak in nhc_pcpu_rth_output within fib_check_nh_v6_gw(). The root cause was that fib_nh_common_init() was moved before alloc_percpu_gfp() and cleanup for nhc_pcpu_rth_output was not added on failure. The fix adds cleanup by calling fib_...
CVE-2025-22005
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhcpcpurthoutput in fibchecknhv6gw. fibchecknhv6gw expects that fib6nhinit cleans up everything when it fails. Commit 7dd73168e273 "ipv6: Always allocate pcpu memory in a fib6nh" moved fibnhcommoninit before...
CVE-2024-22005
there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-22005
CVE-2024-22005 affects Google Pixel devices, categorized under the Pixel bulletin as a WLAN-related Elevation of Privilege vulnerability. The root cause is described as an authentication bypass due to improperly used cryptography, enabling local privilege escalation without user interaction. No p...
CVE-2023-22005 affecting package mysql for versions less than 8.0.34-1
CVE-2023-22005 affecting package mysql for versions less than 8.0.34-1. An upgraded version of the package is available that resolves this issue...
Fedora: Security Advisory for community-mysql (FEDORA-2023-a9283d639f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle MySQL Server 8.x <= 8.0.33 Security Update (cpujul2023) - Windows
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
Oracle MySQL Server 8.x <= 8.0.33 Security Update (cpujul2023) - Linux
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
CVE-2023-22005
CVE-2023-22005 affects Oracle MySQL Server, specifically the Server: Replication component, with affected versions listed as 8.0.33 and earlier. The IBM Security Guardium bulletin corroborates an unspecified vulnerability in this replication area that could allow a remote authenticated attacker t...
CVE-2023-22005
...
CVE-2023-22005
...
Joint Advisory AA22-279A and Vulristics
Hello everyone! This episode will be about the new hot twenty vulnerabilities from CISA, NSA and FBI, Joint cybersecurity advisory CSA AA22-279A, and how I analyzed these vulnerabilities using my open source project Vulristics. Alternative video link for Russia: Americans cant just release a list...
CVE-2022-22005
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2022-22005 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2022-22005
CVE-2022-22005 – Microsoft SharePoint Server RCE is an authenticated-execution flaw in SharePoint Server. The initial document states that an authenticated user with Manage Lists permissions could cause arbitrary .NET code to run on the SharePoint Web Application service account. Exploitation wou...
CVE-2022-22005
creationtimestamp| type| source ---|---|--- 2022-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=736 2022-02-09 16:38:51+00:00| seen| https://t.me/NeKaspersky/1786 2022-02-09 20:13:31+00:00| seen| https://t.me/cibsecurity/37103 2022-03-09 10:01:49+00:00|...
Security Updates for Microsoft SharePoint Server 2013 (February 2022)
The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21987 ...