CVE-2022-25908

All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization...

CVE-2022-25908

All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization...

CVE-2022-25908: Improper Neutralization of Special Elements used in an OS Command

All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization...

ALPINE-CVE-2022-47024

A null pointer dereference issue was discovered in function guix11createblankmouse in guix11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts...

CVE-2023-21829

Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle...

CVE-2023-21827

Vulnerability in the Oracle Database Data Redaction component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle...

CVE-2022-39429

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of...

PT-2023-16146 · Rapid7 · Rapid7 Velociraptor

Name of the Vulnerable Software and Affected Versions: Rapid7 Velociraptor versions prior to 0.6.7-5 Description: The issue allows a directory traversal where the collection task could be written by not properly sanitizing the client ID parameter to the "CreateCollection API". This could be...

GSD-2023-1001419 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed

RDMA/rxe: Fix NULL-ptr-deref in rxeqpdocleanup when socket create failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

PT-2023-34529

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential memory leak issue exists in the configfs create dir function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2023-34443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a problem in the nfsd under NFSv4.1, where a double svc xprt put occurs on rpc create failure. The actual impact and attack plausibility have not yet been proven...

PT-2023-34485

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a possible use-after-free UAF in the snic tgt create function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-34524

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the xprtrdma component, specifically in the rpcrdma req create function, where regbuf data is not properly freed. This problem was introduced in version v5.2 and is...

PT-2023-34655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9.229 through 4.9.336 Description The issue is related to a double svc xprt put on rpc create failure under NFSv4.1. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-34681

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to a possible use-after-free UAF in the snic tgt create function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-34219

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the xprtrdma component, specifically in the rpcrdma req create function, where regbuf data is not properly freed. This problem was introduced in version v5.2 and is...

PT-2023-33944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to an inode leak in the ext4 xattr inode create function on an error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-34122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15.85 Description The issue is related to a problem in the nfsd under NFSv4.1, where a double svc xprt put occurs on rpc create failure. The actual impact and attack plausibility have not yet been proven...

PT-2023-33703

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v6.0.15 Description The issue is related to a double svc xprt put under NFSv4.1 in the event of an rpc create failure. The actual impact and potential for attack have not been proven yet. Recommendations For...

PT-2023-33470

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.18 Description The issue is related to an inode leak in the ext4 xattr inode create function on an error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...