9753 matches found
acapy-patched-old (0.5.6), agl-predict-endo-frame (0.1.1) +271 more potentially affected by unknown CVE via pillow (7.2.0)
pillow PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - acapy-patched-old 0.5.6 - agl-predict-endo-frame 0.1.1 - ailab-lite =0.1.1, =0.0.2, =0.3.10, =0.1.0, =2020.1.0, =0.9.0, =0.9.0, =0.8.1, =0.8.1,...
CVE-2022-0618
A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSHPROMISE frame where the frame contains padding information...
CVE-2022-0618
A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSHPROMISE frame where the frame contains padding information...
Cockpit security vulnerabilities
Cockpit is an interactive server management interface. a security vulnerability exists in Cockpit, which stems from another website within the ＜iFrame＞ HTML entry rendering pages from the cockpit server that could be used by malicious websites for clickjacking or similar attacks. No detailed...
CVE-2022-0618
A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSHPROMISE frame where the frame contains padding information...
CVE-2021-3660: Improper Restriction of Rendered UI Layers or Frames
Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...
WordPress Device Frame plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Device Frame plugin versions = 1.0.0. Solution No patched version available...
WordPress Device Frame plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Device Frame plugin versions = 1.0.0. Solution No patched version available...
GSD-2022-1000485 can: isotp: fix potential CAN frame reception race in isotp_rcv()
can: isotp: fix potential CAN frame reception race in isotprcv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...
GSD-2022-1000410 can: isotp: fix potential CAN frame reception race in isotp_rcv()
can: isotp: fix potential CAN frame reception race in isotprcv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...
GSD-2022-1000359 can: isotp: fix potential CAN frame reception race in isotp_rcv()
can: isotp: fix potential CAN frame reception race in isotprcv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.101 by commit...
PT-2022-28865
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue is related to the bnx2fc recv frame function, which has been made mp safe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-28684
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15.23 Description A potential issue exists in the isotp rcv function related to CAN frame reception. The actual impact and attack plausibility have not yet been proven. This issue was introduced in versio...
PT-2022-28772
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.9 Description The issue concerns the reliability of builtin frame address1 in the riscv architecture. It was introduced in version v5.13 and fixed in version v5.16.10. The actual impact and attack...
PT-2022-28952
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.8 Description The issue is related to the bnx2fc recv frame function, which has been made mp safe to address a potential security concern. The actual impact and attack plausibility have not yet been proven...
PT-2022-28695
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue concerns the reliability of builtin frame address1 in the riscv architecture. It was introduced in version v5.13 and fixed in version v5.15.24. The actual impact and attack...
PT-2022-7630 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc1-00233-g9a20c48d1ed2 Description: The issue is related to the riscv component of the Linux kernel, where the trace hardirqs on,off functions require the caller to set up the frame pointer properly. If...
netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way
A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...