CVE-2022-29794

The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...

CVE-2022-29794

The CVE-2022-29794 entry concerns Huawei/HarmonyOS where a Use-After-Free (UAF) flaw in the frame scheduling module is the root cause. Affected component: HarmonyOS kernel/frame scheduling subsystem. Impact, as stated: data integrity, confidentiality, and availability can be compromised upon expl...

org.jenkins-ci.main:jenkins-test-harness (1.429), org.jenkins-ci.main:jenkins-war (1.429) +8 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.429)

org.jenkins-ci.main:jenkins-core MAVEN version 1.429 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.429 - org.jenkins-ci.main:jenkins-war 1.429 -...

org.jenkins-ci.main:jenkins-test-harness (1.429), org.jenkins-ci.main:jenkins-war (1.429) +8 more potentially affected by CVE-2018-1999043 via org.jenkins-ci.main:jenkins-core (1.429)

org.jenkins-ci.main:jenkins-core MAVEN version 1.429 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.429 - org.jenkins-ci.main:jenkins-war 1.429 -...

Improper Resource Shutdown or Release in Apache Tomcat

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOWUPDATE before allowing the application to write more data. These waiting streams each...

Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability

Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's supported ecosystems. This link is maintained to preserve external references. Original Description A flaw was found in the /oauth/token/request custom...

GHSA-JGWG-35HF-XQRR Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability

Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's supported ecosystems. This link is maintained to preserve external references. Original Description A flaw was found in the /oauth/token/request custom...

PT-2022-19836

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue is related to a null pointer dereference vulnerability in the frame scheduling module. This could impact kernel availability if successfully exploited. Recommendations At the...

PT-2022-19835

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The frame scheduling module has a Use After Free UAF vulnerability. Successful exploitation of this vulnerability will affect data integrity, availability...

CVE-2022-29794: Use After Free

The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...

CVE-2022-29795: NULL Pointer Dereference

The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability...

[SECURITY] Fedora 36 Update: mingw-SDL2_ttf-2.0.18-3.fc36

Simple DirectMedia Layer SDL2 is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. This package contains a library that allows you to use TrueType fonts to render text in SDL2 applications...

webkitgtk: use-after-free in WebCore::Frame::page

A use-after-free vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted HTML files causing an application to halt or crash...

HUAWEI HarmonyOS Resource Management Error Vulnerability (CNVD-2022-47652)

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS kernel that stems from a UAF vulnerability in the frame scheduling module, which...

HUAWEI HarmonyOS code issue vulnerability (CNVD-2022-47651)

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS kernel, which stems from a null pointer dereference vulnerability in the frame...

HUAWEI HarmonyOS Resource Management Vulnerability

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS kernel that stems from a UAF vulnerability in the frame scheduling module, which...

HUAWEI HarmonyOS code-related vulnerabilities

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS kernel, which stems from a null pointer dereference vulnerability in the frame...

TYPO3 Backend vulnerable to Frame Hijacking

The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hijacking" issue...

GHSA-MG66-3X8X-R8G2 TYPO3 Backend vulnerable to Frame Hijacking

The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hijacking" issue...

Qualcomm buffer error vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A security vulnerability exists in multiple Qualcomm...