PT-2022-35983 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns a potential null pointer dereference in the sparx stats init and sparx5 start functions. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-35982 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: A potential null pointer dereference issue exists in the lan966x stats init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2024-11814 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel, specifically in the net/mlx5 module. The issue occurs when a command fails while the driver is reloading and cannot accept firmwa...

kernel: hv_netvsc: NULL pointer dereference in netvsc_get_ethtool_stats()

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...

Low: Red Hat Security Advisory: guestfs-tools security, bug fix, and enhancement update

An update for guestfs-tools is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

GSD-2022-1006939 net: broadcom: bcm4908_enet: update TX stats after actual transmission

net: broadcom: bcm4908enet: update TX stats after actual transmission This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006621 net: broadcom: bcm4908_enet: update TX stats after actual transmission

net: broadcom: bcm4908enet: update TX stats after actual transmission This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-35194 · Broadcom · Bcm4908 Enet

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to the update of TX stats after actual transmission in the net: broadcom: bcm4908 enet component. The actual impact and attack plausibility have not yet been proven...

Democritus Project d8s-stats Code Execution Vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. democritus Project d8s-stats version 0.1.0 contains a security vulnerability stemming from the presence of a potential code execution backdoor inserted by a third party in t...

kernel: hv_netvsc: NULL pointer dereference in netvsc_get_ethtool_stats()

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...

PYSEC-2022-43109

The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-math package. The affected version of d8s-htm is 0.1.0...

PYSEC-2022-43109

The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-math package. The affected version of d8s-htm is 0.1.0...

PYSEC-2022-43086

The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-math package. The affected version of d8s-htm is 0.1.0...

PT-2022-37372 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-stats version 0.1.0 d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-stats package for python distributed on PyPI. Another affected package is democritus-math...

CVE-2022-44051

CVE-2022-44051 affects d8s-stats for Python distributed on PyPI, with a potential code-execution backdoor inserted by a third party in the democritus-math package. The vulnerability concerns d8s-htm version 0.1.0. Connected sources corroborate the presence of a backdoor in democritus-math and the...

CVE-2022-44051: Unrestricted Upload of File with Dangerous Type

The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-math package. The affected version of d8s-htm is 0.1.0...

PT-2022-37349 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-stats version 0.1.0 d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-stats package for python distributed on PyPI. Another affected package is democritus-math...

CVE-2022-44051

The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-math package. The affected version of d8s-htm is 0.1.0...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. democritus Project d8s-stats version 0.1.0 contains a security vulnerability stemming from the presence of a potential code execution backdoor inserted by a third party in t...

WordPress 3dady Real Time Web Stats plugin <= 1.0 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Stored Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability discovered by UnD3sc0n0c1d0 in WordPress 3dady Real Time Web Stats plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of December 14, 2018 and is not available for download. Reason...