PT-2022-17277

Name of the Vulnerable Software and Affected Versions Maxsite CMS version 108 Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the f tags parameter at the "/admin/page edit/3" API endpoint. Recommendations For Maxsite CMS...

PT-2022-17274

Name of the Vulnerable Software and Affected Versions Maxsite CMS version v180 Description A stored cross-site scripting XSS issue was found in Maxsite CMS. The vulnerability is exploited via the f file description parameter at the "/admin/files" API endpoint. This allows for malicious scripts to...

safeavenue.f-secure.com Cross Site Scripting vulnerability OBB-2386113

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-28889

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.4 Description The issue affects the USB gadget functionality, specifically the f sourcesink component, where an isoc transfer problem occurs at USB SPEED SUPER PLUS. The actual impact and potential for...

In zsh before 5.8.1 an attacker can achieve code execution if they control a command output inside the prompt as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.

...

PT-2022-28400

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.195 through 4.19.227 Description The issue affects the USB gadget functionality, specifically the f sourcesink component, where an isoc transfer problem occurs at USB SPEED SUPER PLUS. The actual impact and potential...

PT-2022-28468

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.44 through 5.10.95 Description The issue affects the f sourcesink component in the USB gadget subsystem, specifically impacting isochronous transfer for USB SPEED SUPER PLUS. The actual impact and attack plausibility...

PT-2022-28528

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.18 Description The issue affects the f sourcesink function in the USB gadget subsystem, specifically impacting isochronous transfer for USB SPEED SUPER PLUS. The actual impact and attack plausibility...

PT-2022-28429

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.126 through 5.4.175 Description The issue affects the f sourcesink component in the USB gadget subsystem, specifically impacting isochronous transfer for USB SPEED SUPER PLUS. The actual impact and attack plausibility...

PT-2022-28358

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.300 Description The issue affects the USB gadget functionality, specifically the f sourcesink component, where an isoc transfer problem occurs at USB SPEED SUPER PLUS. The actual impact and potential for...

PT-2022-28376

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14.237 through 4.14.264 Description The issue affects the f sourcesink function in the USB gadget subsystem, specifically with isoc transfer for USB SPEED SUPER PLUS. The actual impact and attack plausibility have not y...

CVE-2021-45444: Undefined Security Weakness

In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPTSUBST expansion...

PT-2024-21122

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.7.4 Description The issue is related to the printer write function in the Linux kernel, specifically in the drivers/usb/gadget/function/f printer.c file. This function does not properly call usb ep queue, which...

CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

Design/Logic Flaw

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

CVE-2021-40837 Denial-of-Service (DoS) Vulnerability

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

CVE-2021-40837

The CVE-2021-40837 issue affects the F-Secure antivirus engine prior to Capricorn update 2022-02-01_01. The vulnerability arises during ACE file decompression, triggering a denial-of-service condition where the scanner service stops. It can be exploited remotely by an attacker, leading to availab...

PT-2022-11313

Name of the Vulnerable Software and Affected Versions F-Secure antivirus engine versions before Capricorn update 2022-02-01 01 Description A vulnerability was discovered in the F-Secure antivirus engine, where the decompression of an ACE file causes the scanner service to stop. This issue can be...