PT-2022-30391

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the exec function in the Linux Kernel, where it forces a single empty string when argv is empty. The actual impact and attack plausibility have not yet been proven...

PT-2022-30174

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the exec function handling of empty argv. It has been noted in an automated ID to aid in the discovery of potential security vulnerabilities, though the actual impact...

PT-2022-29866

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the exec function in the Linux Kernel, where it forces a single empty string when argv is empty. The actual impact and attack plausibility have not yet been proven...

PT-2022-29560

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the handling of empty argv in the exec function. It is noted that the actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

CVE-2022-24826

On Windows, if Git LFS operates on a malicious repository with a "..exe" file as well as a file named "git.exe", and "git.exe" is not found in "PATH", the "..exe" program will be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. Similarly, if the...

CVE-2022-24826: Untrusted Search Path

On Windows, if Git LFS operates on a malicious repository with a ..exe file as well as a file named git.exe, and git.exe is not found in PATH, the ..exe program will be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. Similarly, if the malicious...

Unbreakable Enterprise kernel security update

5.4.17-2136.306.1.3 - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address Paolo Bonzini Orabug: 34053807 CVE-2022-1158 5.4.17-2136.306.1.2 - Revert 'rds/ib: recover rds connection from stuck rx path' Rohit Nair Orabug: 34045203 5.4.17-2136.306.1.1 - netfilter: nftables: initialize...

UBUNTU-CVE-2022-1286

heap-buffer-overflow in mrbvmexec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited...

PT-2022-18354 · Inhand Networks · Inrouter 900 Industrial 4G Router

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter 900 Industrial 4G Router versions prior to 1.0.0.r11700 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the web exec parameter at the...

PT-2022-13775

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description A heap-buffer-overflow issue exists in the mrb vm exec function of mruby. This could potentially allow for arbitrary code execution if exploited. Recommendations For versions prior to 3.2, update to...

DEBIAN-CVE-2022-1201

NULL Pointer Dereference in mrbvmexec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter crash, thus affecting the availability of the system...

PT-2022-13708 · Mruby +1 · Mruby +1

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 3.2 Description: The issue is related to a NULL Pointer Dereference in mrb vm exec with super, which can cause the mruby interpreter to crash. This affects the availability of the system. Recommendations: For versions...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Docker $ sudo docker build -t . $ sudo...

UBUNTU-CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

PT-2022-13664

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a use after free in mrb vm exec. Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue...

PT-2022-28265

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue concerns the use of shell exec and exec functions, which were not properly escaping filenames and configuration settings in most cases. Recommendations At the moment, there is n...

PT-2022-13633

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a user after free in mrb vm exec. This problem affects the mruby GitHub repository. Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue...

mruby 资源管理错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby 3.1 and earlier, which stems from post-release reuse in mrbvmexec. No details of the vulnerability are provided at this time...

PT-2022-29161

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29078

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...