7271 matches found
PT-2022-27086 · Sourcecodester · Sourcecodester Canteen Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Canteen Management System affected versions not specified Description: A critical vulnerability was found in the SourceCodester Canteen Management System, affecting the file ajax represent.php. The manipulation of the customer ...
PT-2022-19869 · Western Digital · Western Digital My Cloud
Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud versions prior to 5.25.124 on Linux. Description: The issue is related to an Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices. This could allow a...
CVE-2022-46158
PrestaShop (open-source e-commerce platform) is affected by CVE-2022-46158 due to insufficient restriction of host filesystem access, allowing potential viewing of the upload directory contents. The issue affects versions prior to 1.7.8.8. The advised remediation is upgrading to PrestaShop 1.7.8....
PT-2022-36161 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: A potential memory leak issue exists in the register pcpu function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.6 and is fixe...
PT-2022-36097 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to a use-after-free in the l2cap conn del function. This problem was introduced in version v5.19 and is fixed in Linux Kernel version v6.0.8. The actual impact and attack...
PT-2022-35937 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: A use-after-free issue was discovered in the ntfs attr find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2022-36001 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns error handling in the ata tlink add function. It was introduced in version v2.6.37 and fixed in version v6.0.10. The actual impact and attack plausibility have not yet bee...
PT-2022-35961 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to an overflow check in the sgx validate offset length function. It was introduced in version v5.11 and fixed in version v6.0.10. The actual impact and attack plausibili...
PT-2022-36364 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: A potential memory leak issue exists in the mISDN register device function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.30...
PT-2024-11824 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the tbnet open function. This issue occurs when tb ring alloc rx fails, causing the ida allocated in tb...
WordPress < 3.0.3 Access Restriction Bypass Vulnerability
WordPress is prone to an access restriction bypass vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
WordPress 3.4.x < 3.4.2 XSS / Access Restriction Bypass Vulnerability
WordPress is prone to a cross-site scripting XSS and access restriction bypass vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...
PT-2022-36303 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue concerns error handling in the ata tdev add function. It was introduced in version v2.6.37 and fixed in version v5.10.156. The actual impact and attack plausibility have not yet...
PT-2022-36374 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: The issue is related to a null pointer dereference in the ib core cleanup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-36468 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: The issue allows the tcp cdg release function to be called multiple times. This is a potential security concern, although the actual impact and attack plausibility have not yet been proven...
PT-2022-36226 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: The issue is related to an integer overflow in the ghes estatus pool init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-36517 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: A potential memory leak issue was discovered in the mISDN register device function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-36419 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.224 Description: A potential buffer overflow issue exists in the brcmf fweh event worker function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-36298 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue concerns error handling in the ena init function. It was introduced in version v4.9 and fixed in version v5.10.156. The actual impact and attack plausibility have not yet been...
PT-2022-36344 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: A potential issue exists in the vdec probe function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...