GHSA-H3RG-4H5G-8FQG SSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin

A missing permission check in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

GSD-2022-1002477 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002406 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1002318 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...

GSD-2022-1002194 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1001999 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

GSD-2022-1001716 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001390 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001048 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-30467

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.189 Description The issue is related to a potential security problem in the Linux Kernel, specifically with the MIPS architecture. It involves a fix for a fortify panic that occurs when copying asm exception...

PT-2022-29989

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29663

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29321

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30679

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30591

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30750

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28778

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to compatibility with FORTIFY SOURCE. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.10,...

Replay Attack

laravel/fortify is vulnerable to replay attacks. A remote attacker is able to reuse the user's TOTP code within a short time window to gain unauthorized access to the victim's account...

GHSA-6W4V-QR4M-97GG Multi-Factor Authentication issue in Laravel Fortify

Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept...