Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the hook function. Remediation Upgrade unicorn to version 2.0.0 or higher. References - GitHub Commit - GitHub Issue Credit: liyansong2018...

CVE-2022-29692

Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function...

CVE-2022-29692

Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function...

Design/Logic Flaw

Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function...

Unicorn Engine 资源管理错误漏洞

Unicorn Engine is a software application. A lightweight, multi-platform, multi-architecture CPU simulator framework based on QEMU. A security vulnerability exists in Unicorn Engine version v1.0.3, which originates from reuse after release via a hook function...

CVE-2022-29692

Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function...

CVE-2022-31258

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink...

Code injection

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink...

Checkmk 后置链接漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by an attacker to upgrade to root by editing an OMD hook link.The following products and versions are affected: versions prior to 1.6.0p29, 2.x versions prior to 2.0.0p25, and 2.1.x versions prior to 2.1.0b10...

PT-2022-20645 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 1.6.0p29 Checkmk versions 2.x prior to 2.0.0p25 Checkmk versions 2.1.x prior to 2.1.0b10 Description: A site user can escalate to root by editing an OMD hook symlink. Recommendations: For Checkmk versions prior to...

GHSA-7P4P-V6HR-GP3M Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text

A exposure of sensitive information vulnerability exists in Jenkins Gitlab Hook Plugin 1.4.2 and older in gitlabnotifier.rb, views/gitlabnotifier/global.erb that allows attackers with local Jenkins master file system access or control of a Jenkins administrator's web browser e.g. malicious...

container-tools:rhel8 bug fix update

An update is available for fuse-overlayfs, container-selinux, udica, containers-common, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, python-podman, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common...

container-tools:3.0 security and bug fix update

An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

container-tools:3.0 security and bug fix update

An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

CVE-2022-24070

A use-after-free vulnerability was found in Subversion in the moddavsvn Apache HTTP server HTTPd module. While looking up path-based authorization authz rules, multiple calls to the postconfig hook can invalidate cached pointers to object-pools, which Subversion subsequently uses. This issue...

sandyhookpromise.org Cross Site Scripting vulnerability OBB-2455422

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

container-tools:rhel8 security, bug fix, and enhancement update

An update is available for fuse-overlayfs, container-selinux, udica, containers-common, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, python-podman, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common...

container-tools:3.0 security, bug fix, and enhancement update

An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

Important: kernel

Issue Overview: A NULL pointer dereference flaw may occur in the Linux kernel's relayopen in kernel/relay.c. if the allocpercpu function is not validated in time of failure and used as a valid address for access. An attacker could use this flaw to cause a denial of service. CVE-2019-19462 A new...

Ubuntu 16.04 ESM : Byobu vulnerability (USN-5234-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5234-1 advisory. Sander Bos discovered that Byobu incorrectly handled certain Apport data. An attacker could possibly use this issue to expose sensitive information. Tenable has...