UBUNTU-CVE-2022-28281

If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write would have occurred leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 91.8, Firefox 99, and...

多款Qualcomm产品访问控制错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. An Access Control Error vulnerability exists in a number of...

Design/Logic Flaw

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file...

PT-2022-10219

Name of the Vulnerable Software and Affected Versions MashZone NextGen versions through 10.7 GA Description The issue allows XXE attacks via a malicious XML configuration file, specifically through the "Register an Ehcache Configuration File" admin feature. Recommendations For MashZone NextGen...

CVE-2021-33208: Improper Restriction of XML External Entity Reference

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file...

PT-2025-8027

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17-rc7 Description A vulnerability in the Linux kernel has been resolved. The issue was related to the initialization of device objects in the vmbus device register function. The device's dma mask and dma parms...

PT-2022-38157

Уязвимость функции vmbus device register модуля drivers/hv/vmbus drv.c драйвера поддержки гостевого режима Microsoft HyperV ядра операционной системы Linux связана с некорректной инициализацией. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2021-27424 GE UR family exposure of sensitive information to an unauthorized actor

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information...

CVE-2021-27424: Exposure of Sensitive Information to an Unauthorized Actor

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information...

PT-2025-8122

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc7 Description A vulnerability in the Linux kernel has been identified, specifically in the bcmgenet module. The issue arises due to the compiler's optimization of register read and write operations, whic...

GSD-2022-1000865 hwmon: Handle failure to register sensor with thermal zone correctly

hwmon: Handle failure to register sensor with thermal zone correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

PT-2022-29185

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.232 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-29129

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-29047

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description The issue is related to a use-after-free in the nf register net hook function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29224

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29009

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29205

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.269 Description A race condition exists in the configfs register subsystem and configfs unregister subsystem functions. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

CVE-2021-39719

In lwistopregisterio of lwisdevicetop.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

PT-2022-10998

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write due to an integer overflow in the lwis top register io function of lwis device top.c. This could lead to local escalation of privilege, requiring System executio...