CVE-2022-31146

Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be incorrectly missing metadata required for runtime garbage collection. This means that if a GC happens at runtime then the GC pass will...

Contracts calls to main ENS services will fail. Plus, ETHRegistrarController#withdraw() with future upgrades will revert

Lines of code Vulnerability details This is a classic Code4rena issue. The transfer call has a hard coded gas budget whenever this affect another part of the EVM will be very harmful for those usage which will make the system and its users at risk. There is two parts of this issue; when the calle...

ETHRegistrarController._setRecords can register invalid domains and to some degree, its possible to register any domain name

Lines of code Vulnerability details Impact 1. Register invalid domains at Registrar. 2. It's possible to register any domain name. Proof of Concept ETHRegistrarController.setRecords call function at address resolveruser input with call data bytes calldata datauser input. So it can bypass any meth...

OESA-2022-1750 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2022-21123 Incomplete cleanup of microarchitectural fill...

Mozilla Firefox Security Advisory (MFSA2022-20) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR Security Advisory (MFSA2022-21) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

PT-2025-8546

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18 Description The issue arises in the Linux kernel when the console is enabled, and the univ8250 console setup function calls serial8250 console setup before the .dev is set to uart port. This results in pm...

CVE-2022-31897

SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting XSS via publichtml/registervisitor?msg=...

CVE-2022-31897

SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting XSS via publichtml/registervisitor?msg=...

CVE-2022-31897

SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting XSS via publichtml/registervisitor?msg=...

PT-2022-20977 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Zoo Management System version 1.0 Description: The issue concerns Cross Site Scripting XSS via the "public html/register visitor?msg=" endpoint. This allows for potential malicious script injection. No information is provided...

NVIDIA GPU Display Driver Kernel-level driver nvlddmkm.sys Disclosure DoS

The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver is related to access control deficiencies. Exploiting this vulnerability can allow attackers to disclose sensitive information, compromise data integrity, and cause service failures by gaining administrativ...

GSD-2022-1003548 ftrace: Clean up hash direct_functions on register failures

ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003308 ftrace: Clean up hash direct_functions on register failures

ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003004 ftrace: Clean up hash direct_functions on register failures

ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002729 misc: ocxl: fix possible double free in ocxl_file_register_afu

misc: ocxl: fix possible double free in ocxlfileregisterafu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002663 ftrace: Clean up hash direct_functions on register failures

ftrace: Clean up hash directfunctions on register failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-30854

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A refcount leak was discovered in the bcma mdio mii register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31827

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns error handling in the idxd cdev register function. It was introduced in version v5.6 and fixed in version v5.10.121. The actual impact and attack plausibility have not yet...

PT-2022-31352

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A memory leak issue was discovered in the thermal cooling device register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...