GSD-2022-1001209 MIPS: pgalloc: fix memory leak caused by pgd_free()

MIPS: pgalloc: fix memory leak caused by pgdfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1000969 drivers: net: slip: fix NPD bug in sl_tx_timeout()

drivers: net: slip: fix NPD bug in sltxtimeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

Multiple cross-site scripting (XSS) vulnerabilities in Roundup

Multiple cross-site scripting XSS vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the 1 @okmessage or 2 @errormessage parameter to issue...

Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code...

GHSA-4XF9-4R44-86RC ImpressPages CMS RCE

ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution fixed in v1.0.13...

TYPO3 is vulnerable to Information Disclosure in the HTML mailing API

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API...

FANUC ROBOGUIDE access control error vulnerability

FANUC ROBOGUIDE is a robot simulation software from FANUC Japan.ROBOGUIDE v9.40083.00.05 and earlier versions have an access control error vulnerability that stems from not limiting or incorrectly restricting access to resources by unauthorized participants. An attacker could use this vulnerabili...

CVE-2021-3101

Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on the container...

CVE-2022-21486 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21483 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21482 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21484 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21427 vulnerabilities

Vulnerabilities for packages: mysql...

Privilege Escalation

webkit2gtk is vulnerable to privilege escalation. The vulnerability exists due to a logic issue that was addressed with improved state management which allows remote attackers to gain elevated privileges...

CVE-2022-1341

An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c...

PYSEC-2022-43153

Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3code.c called indirectly from CompileBranchTable in m3compile.c...

CVE-2022-27814

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option...

CVE-2020-29653

Froxlor through 0.10.22 does not perform validation on user input passed in the customermail GET parameter. The value of this parameter is reflected in the login webpage, allowing the injection of arbitrary HTML tags...

DSA-5119-1 subversion - security update

Bulletin has no description...

GHSA-9H73-W7CH-RH73 Header Injection

Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added. This attack appear to be exploitable via Crafting a value to be sent as a cookie. This vulnerability appears to have been fixed in = 1.3.5 or 1.2.5 o...