CVE-2021-39394

mm-wiki v0.2.1 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add user accounts and modify user information...

Cross site request forgery (csrf)

mm-wiki v0.2.1 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add user accounts and modify user information...

Cross site scripting

mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...

CVE-2021-39394

mm-wiki v0.2.1 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add user accounts and modify user information...

CVE-2021-39394

CVE-2021-39394 affects mm-wiki v0.2.1, where a Cross-Site Request Forgery (CSRF) allows an attacker to arbitrarily add user accounts and modify user information. The NVD entry lists CVSS‑3.1 base score 6.5 (Medium) with network vector, low attack complexity, no privileges required, but user inter...

CVE-2021-39393

mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...

CVE-2021-39393

CVE-2021-39393 affects mm-wiki v0.2.1, with a cross-site scripting (XSS) vulnerability via the markdown editor. The issue stems from insufficient input sanitization, enabling injection of malicious scripts. Impact and remediation details are limited across the provided sources; CVSS indicates a l...

mm-wiki 跨站脚本漏洞

mm-wiki is a Chinese phachon individual developers of a lightweight enterprise knowledge sharing and team collaboration software. It can be used to quickly build enterprise Wiki and team knowledge sharing platform. A security vulnerability exists in mm-wiki v0.2.1, which is caused by cross-site...

mm-wiki 跨站请求伪造漏洞

mm-wiki is a Chinese phachon individual developers of a lightweight enterprise knowledge sharing and team collaboration software. It can be used to quickly build enterprise Wiki and team knowledge sharing platform. A security vulnerability exists in mm-wiki version v0.2.1, which originated from a...

GSD-2022-1004939 mm/slub: add missing TID updates on slab deactivation

mm/slub: add missing TID updates on slab deactivation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.323 by commit...

GSD-2022-1004890 mm/slub: add missing TID updates on slab deactivation

mm/slub: add missing TID updates on slab deactivation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.288 by commit...

GSD-2022-1004754 arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer

arm64: mm: Don't invalidate FROMDEVICE buffers at start of DMA transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.201 by commit...

GSD-2022-1004748 mm/slub: add missing TID updates on slab deactivation

mm/slub: add missing TID updates on slab deactivation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.205 by commit...

GSD-2022-1004645 arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer

arm64: mm: Don't invalidate FROMDEVICE buffers at start of DMA transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.125 by commit...

GSD-2022-1004478 mm/slub: add missing TID updates on slab deactivation

mm/slub: add missing TID updates on slab deactivation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.54 by commit...

GSD-2022-1004295 arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer

arm64: mm: Don't invalidate FROMDEVICE buffers at start of DMA transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...

GSD-2022-1004247 mm/memory-failure: disable unpoison once hw error happens

mm/memory-failure: disable unpoison once hw error happens This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...

Unbreakable Enterprise kernel security update

4.14.35-2047.515.3 - uek-rpm: Enable Pensando EMMC reset controller Thomas Tai Orabug: 34325721 - mfd: pensandoelbasr: Add Pensando Elba System Resource Chip Brad Larson Orabug: 34325721 - dsc-drivers: update drivers for 1.15.9-C-65 Shannon Nelson Orabug: 34325721 4.14.35-2047.515.2 - net/rds:...

GSD-2022-1002662 mm/page_owner: use strscpy() instead of strlcpy()

mm/pageowner: use strscpy instead of strlcpy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

mm-one.tv Cross Site Scripting vulnerability OBB-2671348

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...