PT-2022-36480 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: drbd versions prior to v4.19.267 linux kernel versions 3.15 through 4.19.266 Description: A use after free issue exists in the drbd create device function. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-36157

Name of the Vulnerable Software and Affected Versions drbd versions prior to v5.15.80 Description The issue is related to a use after free in the drbd create device function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.15.80, update...

PT-2022-36296 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: drbd versions prior to v5.10.156 Description: A use after free issue exists in the drbd create device function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v5.10.156, update to...

PT-2022-36400 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: drbd versions prior to v5.4.225 Description: The issue is related to a use after free in the drbd create device function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v5.4.225,...

PT-2022-38223

Уязвимость функции ext4 xattr inode create модуля fs/ext4/xattr.c файловой системы Ext4 ядра операционной системы Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Cross site scripting

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /leavesystem/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name...

Online Leave Management System Cross-site Scripting Vulnerabilities

Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a stored cross-site scripting XSS vulnerability in the component /leavesystem/admin/?page=maintenance/department. The...

CVE-2022-45008: Improper Neutralization of Input During Web Page Generation

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /leavesystem/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization. PoC js var root =require"create-choo-app3" root.devInstall"./","& touch JHU",function Remediation There is no fixed version for create-choo-app3...

CVE-2022-23737: Improper Privilege Management

An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improper privileges to create or delete pages via the API. To exploit this vulnerability, an attacker would need to be added to an organization's repo with write permissions. This...

GitHub Enterprise Server security vulnerabilities

GitHub Enterprise Server is a U.S. GitHub open source application. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server versions prior to 3.7, which...

Garage Management System Cross-site Scripting Vulnerabilities

Garage Management System is a garage management system developed by Mayuri K. A cross-site scripting vulnerability exists in Garage Management System v1.0, which can be exploited by attackers to inject malicious scripts at /garage/phpaction/createBrand.php and obtain sensitive information such as...

PT-2025-37571

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the vkms init function within the kernel's drm/vkms module. This leak occurs when the vkms create function fails, but the memory allocated for config with...

Creation of Temporary File in Directory with Insecure Permissions

Overview com.github.samtools:htsjdk is a Java API for high-throughput sequencing data HTS formats Affected versions of this package are vulnerable to Creation of Temporary File in Directory with Insecure Permissions. due to the createTempDir function in util/IOUtil.java not checking for the...

MPXJ security vulnerabilities

MPXJ is an open source library for Jon Iles individual developers. It is used to read and write project plans from various file formats and databases. A security vulnerability exists in MPXJ versions prior to 10.14.1 that stems from the use of File.createTempFile... This causes a temporary file t...

PT-2022-36786 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack buffer overflow error, as indicated by the crash type 'Stack-buffer-overflow WRITE'. The crash state includes functions...

Security Bulletin: IBM® Db2® is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. (CVE-2022-22483)

Summary IBM® Db2® is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. Vulnerability Details CVEID:CVE-2022-22483 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5,...

expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

A use-after-free flaw was found in the Expat package, caused by destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. This may lead to availability disruptions...

PT-2022-8675

Name of the Vulnerable Software and Affected Versions optilink OP-XT71000N version: V2.2 Description A vulnerability in the "/admin/wlmultipleap.asp" API endpoint of optilink OP-XT71000N could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to create...

Stored cross site scripting

Hi Team, I have found a stored cross-site scripting vulnerability in the Create event section. Description What is stored cross site scripting attack? Stored XSS, occurs when user supplied input is stored and then rendered within a web page. Typical entry points for stored XSS are: message forums...