CVE-2022-46208

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

PT-2023-33520 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns a problem with reserved cluster accounting in the es remove extent function. The actual impact and potential for attack have not been proven yet. Recommendations: For Linu...

PT-2023-33981 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue concerns a problem with reserved cluster accounting in the es remove extent function. The actual impact and potential for attack have not been proven yet. Recommendations: For Lin...

CVE-2022-45614

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-4228. Reason: This candidate is a reservation duplicate of CVE-2022-4228. Notes: All CVE users should reference CVE-2022-4228 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2021-42834

The connected HP advisory HPSBHF03825 notes a potential elevation of privilege in HyperX NGENUITY software, remediated on 2021-11-08. No explicit CVE mapping or exploit details are provided in the document. The Initial CVE entry CVE-2021-42834 remains reserved/placeholder with no public details i...

CVE-2022-4387

Technical details for CVE-2022-4387 are not publicly available in the provided documents. The connected IBM bulletin discusses other CVEs (43872, 43875) affecting IBM Financial Transaction Manager for SWIFT Services; monitor for updates.

CVE-2022-41268

In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAPBW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code reserved for the customer is used. By implementing such transaction code, a malicious user may execute unauthorized...

GSD-2022-1008068 riscv: fix reserved memory setup

riscv: fix reserved memory setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.155 by commit 94ab8f88feb75e3b1486102c0c9c550f37d9d137, i...

Cloudflare Public Bug Bounty: Using special IPv4-mapped IPv6 addresses to bypass local IP ban

Vulnerability description not provided...

CVE-2014-4931

Summary: The connected documents describe a code injection vulnerability in Symfony’s translation caching within FrameworkBundle. The issue arises when locales from URLs are not sanitized before being dumped into a PHP cache file, enabling an attacker to inject PHP code via a crafted locale value...

CVE-2020-26784

CVE-2020-26784 is referenced in Windows update records as a Denial of Service issue affecting Cluster Shared Volumes (CSV). The connected MSKBs (KB5012596, KB5012599, KB5012604, KB5012647, KB5012670) indicate that the CSV DoS issue is addressed/improved in the April 2022 security updates across m...

CVE-2020-1341

CVE-2020-1341 affects Microsoft Edge (Chromium-based). The issue is an Elevation of Privilege when DLLs are allowed to download without an additional user prompt. Exploitation requires a user to browse to a malicious site and initiate a DLL download, which could lead to elevated privileges on the...

CVE-2022-45844

CVE-2022-45844 is associated with a Broken Access Control vulnerability in the WordPress Organization Chart plugin prior to version 1.4.2. The Patchstack entry specifies that versions ≤ 1.4.1 are affected, with remediation by updating to at least 1.4.2. No exploitation details are provided in the...

CVE-2021-42898

Technical details for CVE-2021-42898 are not publicly available in the provided documents. Monitor for updates as the Initial Description indicates the candidate is reserved.

kernel: ext4: add reserved GDT blocks check

A flaw was found in the ext4 module in the Linux kernel. Resizing a corrupt ext4 image can cause a NULL pointer dereference due to a missing check if the reserved GDT blocks is zero when the resizeinode feature is disabled, resulting in a denial of service...

PT-2022-35618 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.223 Description: A potential issue exists where the hugetlb lock is not taken before decrementing h-resv huge pages. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

CVE-2022-45075

CVE-2022-45075 corresponds to a Broken Access Control vulnerability in the WordPress Activity Reactions For Buddypress plugin, affected versions

kernel: ext4: add reserved GDT blocks check

A flaw was found in the ext4 module in the Linux kernel. Resizing a corrupt ext4 image can cause a NULL pointer dereference due to a missing check if the reserved GDT blocks is zero when the resizeinode feature is disabled, resulting in a denial of service...

CVE-2021-045960

IBM Robotic Process Automation for Cloud Pak 21.0.2 is affected by multiple vulnerabilities tied to Expat/libexpat and related components, including CVE-2021-045960. The bulletin lists Expat-derived CVEs impacting the base container images and the .NET 6 runtime, with various CVSS details. Remedi...

CVE-2022-3772

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-36534. Reason: This candidate is a reservation duplicate of CVE-2020-36534. Notes: All CVE users should reference CVE-2020-36534 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...