PT-2021-23857 · Teeworlds +1 · Teeworlds +1

Name of the Vulnerable Software and Affected Versions: Teeworlds versions up to and including 0.7.5 Description: The issue arises from a map parser that does not validate the m Channels value coming from a map file, leading to a buffer overflow. A malicious server can offer a specially crafted ma...

Ubuntu 20.04 LTS : Apache Log4j 2 vulnerability (USN-5197-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5197-1 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. An attacker could use...

Default configuration

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a non-default Pattern Layout with either a Context...

GHSA-7RJR-3Q55-VV33 Incomplete fix for Apache Log4j vulnerability

Impact The fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allow attackers with control over Thread Context Map MDC input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup for...

CVE-2021-45046 Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a non-default Pattern Layout with either a Context...

CVE-2021-45046

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a non-default Pattern Layout with either a Context...

Apache Log4j 2.x < 2.16.0 RCE

The version of Apache Log4j on the remote host is 2.x 2.12.2 / 2.16.0. It is, therefore, affected by a remote code execution vulnerability. The fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allow attackers with control over...

Uncontrolled Resource Consumption in fun-map

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

GHSA-P33M-7W7F-GMJ8 Uncontrolled Resource Consumption in fun-map

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

WordPress WP Google Map plugin <= 1.8.0 - Subscriber+ Map Creation/Update/Deletion vulnerability

Subscriber+ Map Creation/Update/Deletion vulnerability discovered by Nguyen Van Khanh in WordPress WP Google Map plugin versions = 1.8.0. Solution Update the WordPress WP Google Map plugin to the latest available version at least 1.8.1...

WP Google Map < 1.8.1 - Subscriber+ Arbitrary Post Deletion and Plugin's Settings Update

The plugin does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings. v1.8.1 added authorisation checks, however CSRF was still missing and a separate advisory h...

WP Google Map < 1.8.1 - Subscriber+ Map Creation/Update/Deletion

The plugin does not have proper authorisation when creating, deleting and updating maps, allowing any authenticated users, such as subscribers to perform such action...

WordPress WP Google Map plugin <= 1.8.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nguyen Van Khanh Patchstack Red Team project in WordPress WP Google Map plugin versions = 1.8.0. Solution Update the WordPress WP Google Map plugin to the latest available version at least 1.8.1...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.6 and fixes at least the following security issues: A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video card physically without power-off,...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.6 and fixes at least the following security issues: A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video card physically without...

Linux kernel has unspecified vulnerabilities (CNVD-2022-10716)

Linux kernel is the kernel used by the Linux Foundation's open-source operating system Linux. Linux kernel is vulnerable and can be exploited by attackers to bypass Linux kernel restrictions and gain privileges via the Frozen EBPF Map Race...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open-source operating system Linux. Linux kernel is vulnerable and can be exploited by attackers to bypass Linux kernel restrictions and gain privileges via the Frozen EBPF Map Race...

PT-2021-8160 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL-pointer dereference in the hashtab compute size function of the selinux component in the Linux kernel. When the hash table slot array allocation fails in...

The vulnerability in the implementation of the check_map_func_compatibility() function in Linux operating systems allows a malicious actor to exploit their privileges.

The vulnerability of the checkmapfunccompatibility function in Linux operating systems is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2021-41277

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs were not validated prior to being...