PT-2022-33330 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to the ALSA timer and the use of a deferred fasync helper. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33620 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: The issue concerns an out-of-bounds access in the drm/fb-helper component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33329 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to the ALSA pcm and the use of a deferred fasync helper. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

CVE-2022-40673

KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache...

CVE-2022-40673

KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache...

TYPO3-CORE-SA-2022-010: Cross-Site Scripting in <f:asset.css> view helper

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-010...

TYPO3-CORE-SA-2022-010: Cross-Site Scripting in <f:asset.css> view helper

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-010...

PT-2022-23198 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 10.4.32 TYPO3 versions prior to 11.5.16 Description: The f:asset.css view helper in TYPO3 is vulnerable to cross-site scripting when user input is passed as variables to the CSS. Recommendations: Update to TYPO3 versio...

[SECURITY] Fedora 36 Update: golang-github-gohugoio-testmodbuilder-0-0.11.20201030git72e1e0c.fc36

Some helper scripts used for Hugo testing...

br.com.ingenieux.jenkins.plugins:codecommit-url-helper (=0.0.1), com.amcbridge:build-configurator (>=1.0.5.0 <=1.0.6.1) +92 more potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (>=1.2.0 <=4.0.0-rc)

org.jenkins-ci.plugins:git MAVEN version =1.2.0, =1.0.5.0, =1.1.0, =1.9.2-beta, =1.9, =4.0.9, =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0, =1.0.22, =1.0.57 and more Source cves: CVE-2022-36882 Source advisory: OSV:GHSA-8XWJ-2WGH-GPRH...

br.com.ingenieux.jenkins.plugins:codecommit-url-helper (=0.0.1), com.amcbridge:build-configurator (>=1.0.5.0 <=1.0.6.1) +135 more potentially affected by CVE-2022-36881 via org.jenkins-ci.plugins:git-client (>=1.0.2 <=3.0.0-rc)

org.jenkins-ci.plugins:git-client MAVEN version =1.0.2, =1.0.5.0, =1.1.0, =1.9.2-beta, =1.9, =4.0.9, =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0, =1.0.22, =1.0.57 and more Source cves: CVE-2022-36881 Source advisory: OSV:GHSA-CM7J-P8HC-97VJ...

DD-WRT httpd unescape memory corruption vulnerability

Summary A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. Tested Versions DD-WRT Revision 322...

[SECURITY] Fedora 35 Update: golang-github-gohugoio-testmodbuilder-0-0.10.20201030git72e1e0c.fc35

Some helper scripts used for Hugo testing...

olcne security update

olcne 1.4.6-2 - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over - Update gen-certs-helper script to skip printing olcnetransferscript execution - Cleanup grpc connection when node not found and use substr method in case fqdn used for hostname...

scaffold-helper denial-of-service vulnerability

scaffold-helper is able to copy files and folders from a source directory to a destination directory using template styles in template files. scaffold-helper version v1.2.0 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service when copying invalid...

Regular Expression Denial Of Service (ReDoS)

scaffold-helper is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to trigger denial of service conditions due to insufficient checks in getProcessedPath or getDynamicFilename functions. The vulnerability is exploited via copying crafted invalid files...

CVE-2021-40898

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

CVE-2021-40898

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

CVE-2021-40898

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

CVE-2021-40898

CVE-2021-40898 affects scaffold-helper v1.2.0, where copying crafted invalid files triggers a Regular Expression Denial of Service (ReDoS). The issue stems from inefficient/insufficient checks in the regex paths used by getProcessedPath or getDynamicFilename during copy operations, enabling poten...