1665 matches found
CVE-2021-40289: Improper Neutralization of Input During Web Page Generation
mm-wki v0.2.1 is vulnerable to Cross Site Scripting XSS...
PT-2022-11211 · Mm-Wiki · Mm-Wiki
Name of the Vulnerable Software and Affected Versions: mm-wki version 0.2.1 Description: The issue is related to Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take control of the user's session. ...
CVE-2021-40289
mm-wki v0.2.1 is vulnerable to Cross Site Scripting XSS...
CVE-2022-41222
A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code in how a race condition happens between rmap walk and mremap. This flaw allows a local user to crash or potentially escalate their privileges on the system...
CVE-2022-3623: Concurrent Execution using Shared Resource with Improper Synchronization
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function followpagepte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remotely. It is recommended to apply a patch...
CVE-2022-3544: Improper Resource Shutdown or Release
A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected is the function damonsysfsaddtarget of the file mm/damon/sysfs.c of the component Netfilter. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of thi...
Design/Logic Flaw
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to...
CVE-2022-3523
CVE-2022-3523 (Linux kernel) is addressed in MiracleLinux AXSA-2023-7038: the issue is a use-after-free in mm/memory.c during memory fault handling (memory manager race on private device pages). The Nessus/Miracle advisory lists this as one of multiple kernel CVEs affected on kernel 5.14.x builds...
CVE-2022-3523: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to...
CVE-2022-42703
A memory leak flaw with use-after-free capability was found in the Linux kernel. The VMA mm/rmap.c functionality in the ismergeableanonvma function continuously forks, using memory operations to trigger an incorrect reuse of leaf anonvma. This issue allows a local attacker to crash the system...
DEBIAN-CVE-2022-42703
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anonvma double reuse...
UBUNTU-CVE-2022-42703
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anonvma double reuse...
GSD-2022-1006607 mm/slub: fix to return errno if kmalloc() fails
mm/slub: fix to return errno if kmalloc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.260 by commit...
GSD-2022-1006483 mm/slab_common: fix possible double free of kmem_cache
mm/slabcommon: fix possible double free of kmemcache This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
CVE-2022-42703
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anonvma double reuse...
GSD-2022-1005434 mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte
mm/hugetlb: avoid corrupting page-mapping in hugetlbmcopyatomicpte This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...
GSD-2022-1005069 mm/gup: fix FOLL_FORCE COW security issue and remove FOLL_COW
mm/gup: fix FOLLFORCE COW security issue and remove FOLLCOW This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...
CVE-2021-39393
mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...