GSD-2022-1003548 ftrace: Clean up hash direct_functions on register failures

ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003308 ftrace: Clean up hash direct_functions on register failures

ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003004 ftrace: Clean up hash direct_functions on register failures

ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

PT-2022-32207

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description A null-pointer-dereference issue was found in the slgt clean function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31938

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A null-pointer-dereference issue was found in the slgt clean function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32091

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A null-pointer-dereference issue exists in the slgt clean function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31743

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description A null-pointer-dereference issue was found in the slgt clean function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30812

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A null-pointer-dereference issue was found in the slgt clean function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31473

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description A null-pointer-dereference issue was discovered in the slgt clean function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-31168

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to a null-pointer-dereference in the slgt clean function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32299

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A null-pointer-dereference issue was found in the slgt clean function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

CVE-2022-1914

The Clean-Contact WordPress plugin through 1.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS due to the lack of sanitisation and escaping as well...

Cross site request forgery (csrf)

The Clean-Contact WordPress plugin through 1.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS due to the lack of sanitisation and escaping as well...

CVE-2022-1914 Clean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRF

The Clean-Contact WordPress plugin through 1.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS due to the lack of sanitisation and escaping as well...

CVE-2022-1914

The CVE-2022-1914 entry concerns the WordPress Clean-Contact plugin (versions up to 1.6). It states that there is no CSRF check when updating settings, which could let an attacker perform a CSRF attack against a logged-in admin and cause Stored XSS due to lack of sanitisation/escaping. The connec...

CVE-2022-1914: Cross-Site Request Forgery (CSRF)

The Clean-Contact WordPress plugin through 1.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS due to the lack of sanitisation and escaping as well...

WordPress plugin Clean-Contact has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Clean-Contact plugin 1.6 and earlier versions are vulnerable to cross-site request forgery, which...

PT-2022-14191

Name of the Vulnerable Software and Affected Versions Clean-Contact WordPress plugin versions prior to 1.7 Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This could lead to...

PT-2025-8628

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.3-apu2 9 Description A use-after-free issue has been identified in the igb clean tx ring routine when the NIC is running in XDP mode. This issue can be triggered by redirecting traffic into the igb NIC and...

Space bug in `clean_text`

An incorrect mapping from HTML specification to ASCII codes was used. Because HTML treats the Form Feed as whitespace, code like this has an injection bug: let html = format!"", cleantextusersuppliedstring; Applications are not affected if they quote their attributes, or if they don't use cleante...