UBUNTU-CVE-2022-1419

The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...

ASB-A-223072269

In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2022-37893

Уязвимость функции aa pivotroot модуля security/apparmor/mount.c компонента обеспечения безопасности AppArmor ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

WordPress plugin Admin Word Count Column arbitrary file reading vulnerability

WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. PHP is a scripting language that executes on the server side. WordPress plugin Admin An arbitrary file reading vulnerability exists in Word Count Column 2.2 and earlier versions, which...

Deserialization of untrusted data

The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a...

CVE-2022-1390 Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read

The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a...

CVE-2022-1390

CVE-2022-1390 affects the WordPress plugin Admin Word Count Column (versions

CVE-2022-1390: Improper Limitation of a Pathname to a Restricted Directory

The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a...

WordPress plugin Admin Word Count Column路径遍历漏洞

WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. PHP is a scripting language that executes on the server side. WordPress plugin Admin An arbitrary file reading vulnerability exists in Word Count Column 2.2 and earlier versions, which...

PT-2022-13850

Name of the Vulnerable Software and Affected Versions Admin Word Count Column WordPress plugin versions 2.2 and earlier Description The issue allows unauthenticated attackers to read arbitrary files on a server running an old version of PHP susceptible to the null byte technique. This could also...

GSD-2022-1001992 NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()

NFSv4.2: fix reference count leaks in nfs42proccopynotify This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

GSD-2022-1001771 scsi: qla2xxx: Implement ref count for SRB

scsi: qla2xxx: Implement ref count for SRB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001703 NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()

NFSv4.2: fix reference count leaks in nfs42proccopynotify This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001620 remoteproc: Fix count check in rproc_coredump_write()

remoteproc: Fix count check in rproccoredumpwrite This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001034 NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()

NFSv4.2: fix reference count leaks in nfs42proccopynotify This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-30265

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to reference count leaks in the nfs42 proc copy notify function in NFSv4.2. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29399

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the scsi: qla2xxx module in the Linux Kernel. It involves implementing a reference count for SRB. The actual impact and attack plausibility have not yet been proven...

PT-2022-29976

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to reference count leaks in the nfs42 proc copy notify function in NFSv4.2. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29650

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A potential issue exists in the NFSv4.2 implementation, specifically in the nfs42 proc copy notify function, where reference count leaks may occur. The actual impact and attack plausibility o...

PT-2022-30198

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential security issue exists in the remoteproc component of the Linux Kernel. The issue is related to a count check in the rproc coredump write function. The actual impact and attack...