Esri Arcgis Server 跨站脚本漏洞

Esri Arcgis Server is a Web-oriented, enterprise-class software platform for delivering geolocation services from Environmental Systems Research Institute Esri. A security vulnerability exists in Esri Arcgis Server versions 10.8.1 and 10.7.1, which stems from a cross-site scripting vulnerability ...

GSD-2022-1006582 net/smc: Stop the CLC flow if no link to map buffers on

net/smc: Stop the CLC flow if no link to map buffers on This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.146 by commit...

GSD-2022-1006555 net/smc: Stop the CLC flow if no link to map buffers on

net/smc: Stop the CLC flow if no link to map buffers on This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

GSD-2022-1006515 net/smc: Stop the CLC flow if no link to map buffers on

net/smc: Stop the CLC flow if no link to map buffers on This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006471 net/smc: Stop the CLC flow if no link to map buffers on

net/smc: Stop the CLC flow if no link to map buffers on This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

OESA-2022-1957 log4j security update

Log4j is a tool to help the programmer output log statements to a variety of output targets. Security Fixes: It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Contex...

The vulnerability of the verifier functions ebpf in the bpf_map_update_elem and bpf_map_freeze components of the Linux operating system’s kernel/bpf/syscall.c module allows a attacker to compromise data integrity.

The vulnerability of the verifier functions ebpf in the bpfmapupdateelem and bpfmapfreeze components of the Linux operating system’s kernel/bpf/syscall.c file is related to the absence of locking mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity...

WorkOrder CMS 0.1.0 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit Title: WorkOrder CMS 0.1.0 Cross-Site Scripting XSS Date: Sep 22, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: https://github.com/romzes13/WorkOrderCMS Software Link: https://github.com/romzes13/WorkOrderCMS/archive/refs/tags/v0.1.0.zip Version: 0.1.0 Payload:...

kernel: ice: arfs: fix use-after-free when freeing @rx_cpu_rmap

In the Linux kernel, the following vulnerability has been resolved: ice: arfs: fix use-after-free when freeing @rxcpurmap The CI testing bots triggered the following splat: 718.203054 BUG: KASAN: use-after-free in freeirqcpurmap+0x53/0x80 718.206349 Read of size 4 at addr ffff8881bd127e00 by task...

The vulnerability of the GNU C Library, related to memory initialization errors, allows a perpetrator to gain access to confidential data.

The vulnerability of the GNU C Library is related to the incorrect handling of LDPREFERMAP32BITEXEC. Exploiting this vulnerability allows an attacker to access confidential data...

GSD-2022-1005523 bpf: Don't reinit map value in prealloc_lru_pop

bpf: Don't reinit map value in prealloclrupop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005281 bpf: fix potential 32-bit overflow when accessing ARRAY map element

bpf: fix potential 32-bit overflow when accessing ARRAY map element This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

CVE-2022-25696

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Race condition

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-38789

An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference...

Yellowfin 跨站脚本漏洞

Yellowfin is a suite of innovative data and analytics products from Yellowfin Australia. A security vulnerability exists in Yellowfin Business Intelligence version 7.3, which stems from a cross-site scripting XSS vulnerability found to be contained in the configMap parameter. An attacker could...

CVE-2021-0943

In MMUMapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap) a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.

...

Imperva Boosts Connectivity with New PoP in Manila

We are delighted to announce the addition of a new Imperva Point of Presence PoP in the Asia Pacific region with the opening of our new data center in Manila, Philippines. The new location brings our total number of PoPs in Asia to 15, significantly boosting our presence in the region and providi...

XSS Vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Mobile Library Public Library Version

Mobile Library Public Library Edition is a mobile application personalized for public library patrons. There is an XSS vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Mobile Library Public Map Edition, which can be exploited by attackers ...