PT-2021-29437

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.45 Description The issue is related to a use-after-free in gfs2 glock shrink scan. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29441

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue is related to a potential security problem in the mac80211 component of the Linux Kernel, specifically in the ieee80211 scan rx function. The actual impact and attack plausibility...

PT-2021-25525

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: A potential security issue exists in the mac80211 component of the Linux Kernel, related to an skb length check in the ieee80211 scan rx function. The actual impact and attack plausibility...

PT-2021-29519

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description A potential security issue exists in the mac80211 component of the Linux Kernel, related to an skb length check in the ieee80211 scan rx function. The actual impact and attack plausibility ha...

PT-2021-25443

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.45 Description: The issue is related to a use-after-free in gfs2 glock shrink scan. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-25382

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.127 Description: The issue is related to a use-after-free in gfs2 glock shrink scan. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v5.4.127, upda...

PT-2021-29376

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.127 Description The issue is related to a use-after-free in gfs2 glock shrink scan. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25522

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.12 Description: The issue is related to a use-after-free in gfs2 glock shrink scan. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-25447

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: The issue is related to a potential security problem in the mac80211 component of the Linux Kernel, specifically in the ieee80211 scan rx function. The actual impact and attack plausibility...

mediawiki -- multiple vulnerabilities

Mediawiki reports: T285515, CVE-2021-41798 SECURITY: XSS vulnerability in Special:Search. T290379, CVE-2021-41799 SECURITY: ApiQueryBacklinks can cause a full table scan. T284419, CVE-2021-41800 SECURITY: fix PoolCounter protection of Special:Contributions. T279090, CVE-2021-41801 SECURITY:...

Andrew Appel on New Hampshire’s Election Audit

Really interesting two part analysis of the audit conducted after the 2020 election in Windham, New Hampshire. Based on preliminary reports published by the team of experts that New Hampshire engaged to examine an election discrepancy, it appears that a buildup of dust in the read heads of...

The vulnerability of the Security Agent component in Trend Micro’s antivirus software solutions—Worry-Free Business Security, Apex One, and OfficeScan—allows a malicious actor to escalate their privileges or execute arbitrary code.

The vulnerability of the Security Agent component in Trend Micro’s antivirus software products, namely Worry-Free Business Security, Apex One, and OfficeScan, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges or execute...

PT-2024-11346 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible buffer overflow in the wl1251 cmd scan function has been resolved. The function calls memcpy without checking the length, which can lead to a buffer overflow. To harden the...

The vulnerability of the Apex One and OfficeScan anti-virus software relates to the disclosure of information, which allows a malicious actor to gain unauthorized access to protected data.

The vulnerability of the Apex One and OfficeScan antivirus software relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GSD-2021-1000464 ACPI: scan: Fix a memory leak in an error handling path

ACPI: scan: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.233 by commit...

GSD-2021-1000442 ACPI: scan: Fix a memory leak in an error handling path

ACPI: scan: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000405 ACPI: scan: Fix a memory leak in an error handling path

ACPI: scan: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by commit...

GSD-2021-1000477 ACPI: scan: Fix a memory leak in an error handling path

ACPI: scan: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.269 by commit...

UVI-2021-1000200 ACPI: scan: Fix a memory leak in an error handling path

ACPI: scan: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

PT-2021-28870

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.109 through 5.4.119 Description A memory leak was discovered in an error handling path in the ACPI scan functionality. The issue was introduced in version v5.4.109 and is fixed in version v5.4.120. The actual impact a...