CVE-2022-4821 FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

CVE-2022-4821

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

CVE-2022-4821: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

PT-2022-38153

Уязвимость функции open metadata модуля drivers/md/dm-thin-metadata.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с выполнением цикла с недоступным условием выхода«Бесконечный цикл». Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

md-it.ru Cross Site Scripting vulnerability OBB-3086247

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

md-sms.com Cross Site Scripting vulnerability OBB-3081828

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-38038

Уязвимость функции pool destroy модуля drivers/md/dm-thin.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с повторным использованием ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

md-consulting.ru Cross Site Scripting vulnerability OBB-3079057

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2022-1007065 md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk()

md/raid5: Remove unnecessary bioput in raid5readonechunk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006807 md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk()

md/raid5: Remove unnecessary bioput in raid5readonechunk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35320

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description A potential security issue has been identified in the Linux Kernel, related to the md/raid5 module. The issue concerns the removal of an unnecessary bio put in the raid5 read one chunk...

PT-2025-49454

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s md/raid0 and raid10 subsystems related to discard sector handling. The issue arises because the code incorrectly sets the maximum discard sectors,...

PT-2025-38419

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s md-bitmap driver where the return value of the md bitmap get counter function is not properly checked. If this function returns a NULL pointer, a null...

EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2022-2422)

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the 'i2c md' command enables th...

GSD-2022-1006298 drivers:md:fix a potential use-after-free bug

drivers:md:fix a potential use-after-free bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006272 md-raid10: fix KASAN warning

md-raid10: fix KASAN warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit bcbdc26a44aba488d2f7122f2d66801bccb74733. For...

GSD-2022-1006178 md-raid10: fix KASAN warning

md-raid10: fix KASAN warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit 7a6ccc8fa192fd357c2d5d4c6ce67c834a179e23. For...

GSD-2022-1005913 md-raid: destroy the bitmap after destroying the thread

md-raid: destroy the bitmap after destroying the thread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005906 md-raid10: fix KASAN warning

md-raid10: fix KASAN warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit 5fd4ffa2372a41361d2bdd27ea5730e4e673240c. For...

GSD-2022-1005739 Revert "md-raid: destroy the bitmap after destroying the thread"

Revert "md-raid: destroy the bitmap after destroying the thread" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...