Websoft HCM Automation Software Code Execution

The vulnerability of Websoft HCM’s automation software for HR processes is related to errors in filtering user code within the XML tag handler. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

NXP Semiconductors i.MX SoC security vulnerabilities

The NXP Semiconductors i.MX SoC is a multi-core solution for multimedia and display applications from NXP Semiconductors of the Netherlands, featuring scalable, secure and reliable high performance and low power consumption. A security vulnerability exists in the NXP Semiconductors i.MX SoC that,...

SUSE-SU-2022:4009-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2021-43980: Improve the recycling of Processor objects to make it more robust. bsc1203868...

CVE-2022-20943

Multiple vulnerabilities in the Server Message Block Version 2 SMB2 processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service DoS condition on an affected device. These...

CVE-2022-20922

Multiple vulnerabilities in the Server Message Block Version 2 SMB2 processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service DoS condition on an affected device. These...

Design/Logic Flaw

Multiple vulnerabilities in the Server Message Block Version 2 SMB2 processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service DoS condition on an affected device. These...

kernel: arch/arm64: Fix topology initialization for core scheduling

In the Linux kernel, the following vulnerability has been resolved: arch/arm64: Fix topology initialization for core scheduling Arm64 systems rely on storecputopology to call updatesiblingsmasks to transfer the toplogy to the various cpu masks. This needs to be done before the call to...

kernel: irqchip/gic-v3-its: Fix potential VPE leak on error

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Fix potential VPE leak on error In itsvpeirqdomainalloc, when itsvpeinit returns an error, there is an off-by-one in the number of VPEs to be freed. Fix it by simply passing the number of VPEs allocated, which...

kernel: NULL pointer dereference in x86_emulate_insn may lead to DoS

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86emulateinsn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU...

hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions

A flaw was found in hw. Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions...

hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS)

A flaw was found in hw. Incomplete cleanup of microarchitectural fill buffers on some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: information disclosure in certain Intel processors

A flaw was found in hw. Processor optimization removal or modification of security-critical code for some IntelR processors may potentially allow an authenticated user to enable information disclosure via local access...

PT-2022-35299 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility hav...

PT-2022-35758 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility ha...

PT-2022-35504

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility have...

PT-2022-35030 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility have...

PT-2022-35901

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility have...

PT-2022-35648

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220 Description The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility have...

PT-2022-35837 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: The issue is related to the use of smp processor id instead of get cpu in the intel powerclamp module, which could potentially lead to a crash. The actual impact and attack plausibility ha...

CVE-2022-26006

CVE-2022-26006 describes an vulnerability in the BIOS firmware for some Intel processors caused by improper input validation, which could allow a privileged user to escalate privileges via local access. The issue is documented by Intel under INTEL-SA-00688 and is reflected in Nessus/F5 advisories...