CVE-2022-23033

arm: guestphysmapremovepage not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm p2mremovemapping, guestphysmapremovepage, and p2msetentry with mfn set to INVALIDMFN do not actually clear the pagetable entry if the entry doesn't have the vali...

CVE-2022-23033

arm: guestphysmapremovepage not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm p2mremovemapping, guestphysmapremovepage, and p2msetentry with mfn set to INVALIDMFN do not actually clear the pagetable entry if the entry doesn't have the vali...

in star7th/showdoc

Description There is a filter to prevent upload php, HTML, svg filetype in the code snippet from line 115 to line 122 in AttachmentController.class.php: if strstrstriptagsstrtolower$uploadFile'name', ".php" || strstrstriptagsstrtolower$uploadFile'name', ".htm" ||...

Prevent anonymous users to access Drupal pages - Critical - Unsupported - SA-CONTRIB-2022-005

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466procedure---own-project---unsupported...

Google Chrome has an unspecified vulnerability (CNVD-2022-15143)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that could be exploited by attackers to potentially exploit heap corruption via carefully crafted HTML pages...

The vulnerability of JSP-based software technologies like Apache JSPWiki, due to lack of access control mechanisms, allows attackers to delete any files they desire.

The vulnerability of JSP-based software, such as Apache JSPWiki, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to delete arbitrary files using a specially crafted HTTP request...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-15142)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a resource management error that could be exploited by attackers to convince users to engage in specific user interactions to exploit heap corruption via carefully designed HTML pages...

Google Chrome Buffer Overflow Vulnerability (CNVD-2022-15141)

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in Google Chrome, which could be exploited by attackers to convince users to install malicious extensions to potentially exploit heap corruption via well-designed HTML pages...

java-17-openjdk security update

An update for java-17-openjdk is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For mor...

Unusual ‘Donald Trump’ Packer Malware Delivers RATs, Infostealers

A new .NET malware packer being used to deliver a variety of remote access trojans RATs and infostealers has a fixed password named after Donald Trump, giving the new find its name, “DTPacker.” DTPacker was discovered by researchers at Proofpoint who, since 2020, have observed it being used by...

CVE-2021-25031

The Image Hover Effects Ultimate Image Gallery, Effects, Lightbox, Comparison or Magnifier WordPress plugin before 9.7.1 does not escape the effects parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-15158)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a resource management error that can be exploited by attackers to potentially exploit heap corruption via well-designed HTML pages...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-15154)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a security feature that could be exploited by attackers to bypass site quarantine via crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-15162)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to resource management errors, which can be exploited by attackers to perform sandbox escapes through carefully crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-15157)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to resource management errors, which can be exploited by attackers to exploit heap corruption via carefully crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-15159)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a resource management error vulnerability that can be exploited by an attacker to leverage heap corruption via a crafted HTML page...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-15160)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a resource management error that could be exploited by attackers to convince users to engage in specific user interactions to exploit heap corruption via carefully designed HTML pages...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-15156)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a security feature that could be exploited by attackers to bypass site quarantine via crafted HTML pages...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-15155)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a security feature issue that could be exploited by attackers to bypass navigation restrictions via crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-15161)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a resource management error that can be exploited by attackers to potentially exploit heap corruption via well-designed HTML pages...