Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...

CVE-2022-30472

Tenda AC Seris Router AC18V15.03.05.196318 has a stack-based buffer overflow vulnerability in function fromAddressNat...

Tenda AC Series Router 缓冲区错误漏洞

Tenda AC Series Router is a series of wireless routers from Tenda China. A security vulnerability exists in Tenda AC Series Router AC18V15.03.05.196318, which originates from a stack-based buffer overflow vulnerability in the fromAddressNat function...

PT-2022-3763

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a Use After Free condition in the mruby interpreter, specifically affecting the hash new from values function. This condition can lead to memory being accessed after it has been...

kernel: Copy_from_user on 64-bit versions may leak kernel information

A vulnerability was found in copyfromuser in 64-bit versions of the Linux kernel. This flaw allows a local attacker to bypass the "accessok" sanity check and pass a kernel pointer to copyfromuser, resulting in kernel data leaking...

eurotherm-sales.com Cross Site Scripting vulnerability OBB-2613414

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CANs Reinvent LANs for an All-Local World

In an article I wrote over a year ago called “Securing the New Normal of Network Access,” I presented four access scenarios that modern organizations needed to enable users to stay securely connected and protected in the new normal of a work-from-anywhere world. Of course, “new” is a relative ter...

charlieblackfield.com Improper Access Control vulnerability OBB-2573709

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2022-1001603 mm/kmemleak: reset tag when compare object pointer

mm/kmemleak: reset tag when compare object pointer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

PT-2022-29382

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A refcount leak was discovered in the gamecube rtc read offset from sram function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line

...

The vulnerability of the `locale_accept_from_http` function (ext/intl/locale/locale_methods.c) in the PHP language interpreter allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the localeacceptfromhttp function located in the ext/intl/locale/localemethods.c file of the PHP language interpreter involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or...

se.huaruileddriver.com Cross Site Scripting vulnerability OBB-2535762

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-37692

Уязвимость функции type from text подсистемы безопасности PARSEC связана с выходом за границы глобального буфера. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании...

mabinogi.fws.tw Cross Site Scripting vulnerability OBB-2505503

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-38125

Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08. The vulnerability could be exploited to...

CVE-2022-27268

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component getcgifrommemory. This vulnerability is triggered via a crafted packet...

PT-2022-36929

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash occurred, involving the functions frame get metalayers, frame to schunk, and blosc2 schunk from buffer. Recommendations A...

com.brdev.ethereumpostage.info Cross Site Scripting vulnerability OBB-2468930

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...