mariadb: assertion failure in Item_args::walk_arg

A use-after-free flaw was found in Maria DB. The MariaDB Server contains a use-after-free in the component, Itemargs::walkarg, which is exploited via specially crafted SQL statements, affecting availability...

mariadb: server crash in Item_args::walk_args

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemargs::walkargs...

mariadb: server crash in Item_args::walk_args

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemargs::walkargs...

mariadb: assertion failure in Item_args::walk_arg

A use-after-free flaw was found in Maria DB. The MariaDB Server contains a use-after-free in the component, Itemargs::walkarg, which is exploited via specially crafted SQL statements, affecting availability...

PT-2022-37102

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: mrb bint as int, mrb ensure int type, and m...

AZL-10311 CVE-2022-30550 affecting package dovecot for versions less than 2.3.20-1

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

PT-2022-3492 · Dovecot +10 · Dovecot +10

Name of the Vulnerable Software and Affected Versions: Dovecot versions 2.2 through 2.3.19 Description: An issue in the auth component of Dovecot can lead to an unintended security configuration, permitting privilege escalation in certain configurations. This occurs when two passdb configuration...

UBUNTU-CVE-2022-32087

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemargs::walkargs...

Cross-site Scripting (XSS)

silverstripe/assets is vulnerable to cross-site scriptingXSS attacks. A remote attacker is able to inject and execute malicious javascript via the args parameter in regenerateshortcode function...

DEBIAN-CVE-2021-40942

In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filterparsedynargs function in filtercore/filter.c:1454, as demonstrated by GPAC. This can cause a denial of service DOS...

PT-2022-11341

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 1.1.0 Description The issue is a heap-buffer-overflow in the filter parse dyn args function, located in filter core/filter.c:1454. This can cause a denial of service DOS. The estimated number of potentially affected devices...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2022-0023)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This allows an attacker to gain privileges o...

PT-2022-30084

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to an unneeded check in the decode devicenotify args function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-29447

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to an unneeded check in the decode devicenotify args function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30703

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to an unneeded check in the decode devicenotify args function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-29771

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to an unneeded check in the decode devicenotify args function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-30337

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns an unneeded check in the decode devicenotify args function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-30503

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to an unneeded check in the decode devicenotify args function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-30619

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to an unneeded check in the decode devicenotify args function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30768

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to an unneeded check in the decode devicenotify args function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...