Simmeth System Supplier Manager 跨站脚本漏洞

Simmeth System Supplier Manager, a supply chain software from Simmeth System GmbH, Germany, is vulnerable to a cross-site scripting vulnerability in versions prior to Simmeth System GmbH Supplier Manager 5.6. An attacker could use this vulnerability to execute JavaScript code in the victim's...

PT-2022-26825 · Unknown · Limesurvey

Name of the Vulnerable Software and Affected Versions: LimeSurvey versions prior to 5.0.4 Description: A SQL injection issue was found in the component /application/views/themeOptions/update.php. Recommendations: For versions prior to 5.0.4, update to version 5.0.4 or later to resolve the issue...

PT-2022-26689 · Atlassian · Netic User Export +1

Name of the Vulnerable Software and Affected Versions: Netic User Export add-on for Atlassian Confluence versions prior to 1.3.5 Description: The issue allows an HTTP request to download any file on the system, including sensitive files like SSH private keys, due to the fileName parameter accepti...

CVE-2022-40735

The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "appropriately short exponents" can be used when there are adequate subgroup constraints, and these sho...

PYSEC-2022-42979

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

PT-2022-35498 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to the xfrm component, specifically with the update of ipcomp scratches when freed. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-35365 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A memory leak was discovered in an error handling path in the nfsd component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35289 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.75 Description: The issue is related to an integer underflow in the core regulator of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PortlandLabs Concrete CMS 授权问题漏洞

PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A security vulnerability exists in Concrete CMS concrete5 versions prior to 8.5.10 and versions 9.0.0 through 9.1.2, which stems from a new session ID not being issued...

PT-2022-35697 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A potential memory leak issue has been identified in the usb-audio component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34966 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: The issue is related to a use after free error. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to 6.0.3, update to version...

PT-2022-35342 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A refcount leak bug was discovered, which may potentially lead to security issues. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35484 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.150 Description: The issue is related to the drm/dp component, specifically with rewriting link config when setting phy test pattern. The actual impact and attack plausibility have not yet been proven...

PT-2022-35422 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.153 Description: A possible memory leak issue was identified in the i2sbus add dev function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35768 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A kernel NULL pointer dereference error was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.19.262,...

PT-2022-35804 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.298 Description: The issue is related to data-races around kcm-rx wait. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.14.298,...

PT-2022-34999 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: The issue is related to polling vid stream status in hpo dp blank. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to 6.0.3...

PT-2022-35587 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.148 Description: A potential security issue exists in the wifi cfg80211/mac80211 component, where bad MBSSID elements are not properly rejected. The actual impact and attack plausibility of this issue have...

PT-2022-35250 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue concerns the use of both GFP KERNEL and GFP ATOMIC in the convert context function. It was introduced in version v5.0 and fixed in version v5.15.76. The actual impact and attack...

PT-2022-35074 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A memory leak issue was discovered in the airspy probe. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.3, update ...