Vulnerability in core server (CVE-2022-2625)

Extension scripts replace objects not belonging to the extension Some extensions use CREATE OR REPLACE or CREATE IF NOT EXISTS commands. Some don't adhere to the documented rule to target only objects known to be extension members already. An attack requires permission to create non-temporary...

CVE-2021-33460

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in ifcondition in modules/preprocs/nasm/nasm-pp.c...

DEBIAN-CVE-2021-33460

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in ifcondition in modules/preprocs/nasm/nasm-pp.c...

PT-2022-10256

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0 Description An issue was discovered in the if condition function in modules/preprocs/nasm/nasm-pp.c, which leads to a NULL pointer dereference. Recommendations For yasm version 1.3.0, consider avoiding the use of the if...

yasm 代码问题漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0, which stems from a NULL pointer dereference in the ifcondition function in modules/preprocs/nasm/nasm-pp.c. The vulnerability is caused by the presence of a NULL...

nobull.com Cross Site Scripting vulnerability OBB-2749158

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-11326 · Unknown · Scaffold-Helper

Name of the Vulnerable Software and Affected Versions: scaffold-helper version 1.2.0 Description: A Regular Expression Denial of Service ReDOS issue was found in scaffold-helper when copying crafted invalid files. This occurs due to inefficient regular expression handling, which can lead to...

GSD-2022-1001950 memory: renesas-rpc-if: fix platform-device leak in error path

memory: renesas-rpc-if: fix platform-device leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.112 by commit...

PT-2022-29923

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description A potential security issue exists due to a platform-device leak in the error path of the renesas-rpc-if memory component. The actual impact and attack plausibility have not yet been proven...

PT-2022-29239

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description A potential security issue exists due to a platform-device leak in the error path of the renesas-rpc-if module. The actual impact and attack plausibility have not yet been proven...

PT-2022-30223

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description A potential security issue exists due to a platform-device leak in the error path of the renesas-rpc-if module. The actual impact and attack plausibility have not yet been proven...

PT-2025-7978

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the renesas-rpc-if module. The problem occurs when the registration of the flash platform device fails during...

if-ocean.com Improper Access Control vulnerability OBB-2460718

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-24128

Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation. The installation process uses commands such as CREATE x IF NOT EXIST that allow an unprivileged user to precreate objects. These objects will be used by the installer which executes as...

CVE-2022-24128: Incorrect Authorization

Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation. The installation process uses commands such as CREATE x IF NOT EXIST that allow an unprivileged user to precreate objects. These objects will be used by the installer which executes as...

mrpeanutir.com Cross Site Scripting vulnerability OBB-2422573

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2022-1000285 Unsafe default configuration values in Nginx version all version

INFORMATIONAL In Nginx, all versions, a number of unsafe default configuration values exists in the web server that can be attacked via the network resulting in disclosure of information and availability. These include but are not limited to: 1. Not enough file descriptors per worker 2. The...

Apple Mac OS X Security Update (HT213056)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0423)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wasm3 缓冲区错误漏洞

wasm3 is the fastest WebAssembly interpreter, as well as the most versatile runtime. A security vulnerability exists in Wasm3 0.5.0 that stems from an out-of-bounds write in CompileBlock called from CompileElseBlock and Compile If...