GSD-2022-1003761 drivers/base/node.c: fix compaction sysfs file leak

drivers/base/node.c: fix compaction sysfs file leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

PT-2022-32024

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential security issue exists due to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32330

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue is related to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-32267

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 4.14.282 Description A potential security issue exists due to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 5.10.120 Description A potential security issue exists due to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31331

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential security issue exists due to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30974

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31602

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-32158

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a compaction sysfs file leak in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

SUSE-SU-2022:1932-1 Security update for patch

This update for patch fixes the following issues: Security fixes: - CVE-2019-13636: Fixed mishandled following of symlinks in certain cases other than input files bsc1142041. - CVE-2018-6952: Fixed double free of memory in pch.c:anotherhunk bsc1080985. Bugfixes: - Pass the correct stat to backup...

SUSE-SU-2022:1888-1 Security update for helm-mirror

This update for helm-mirror fixes the following issues: - Updated to version 0.3.1: - CVE-2019-18658: Fixed a potential symbolic link issue in helm that could be used to leak sensitive files bsc1156646...

CVE-2022-24904: UNIX Symbolic Link (Symlink) Following

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.7.0 and prior to versions 2.1.15m 2.2.9, and 2.3.4 is vulnerable to a symlink following bug allowing a malicious user with repository write access to leak sensitive files from Argo CD's...

PT-2025-8376

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where a compaction sysfs file leak occurs due to the failure to remove the file in the unregister node function after it is created via...

CVE-2022-24730 Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 1.3.0 but before versions 2.1.11, 2.2.6, and 2.3.0 is vulnerable to a path traversal bug, compounded by an improper access control bug, allowing a malicious user with read-only repository acces...

CVE-2021-43734

kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host...

CVE-2021-43734

kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host...

CVE-2021-43734

kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host...

CVE-2021-43734

CVE-2021-43734 affects kkFileview v4.0.0 and is a Local File Inclusion via a directory traversal that may lead to sensitive file leaks on the host. The Nuclei template details an LFI impact with high severity (CVSSv3.1: 7.5) and indicates remediation by upgrading to v4.0.1 or later. Other sources...

CVE-2021-43734

kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host...

CVE-2021-43734

kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host...