Mozilla: Cross-Site Tracing was possible via non-standard override headers

The Mozilla Foundation Security Advisory describes this flaw as: Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitiga...

PT-2022-38093

Уязвимость функции eprobe trigger func модуля kernel/trace/trace eprobe.c поддержки трассировки ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-18516

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1-00186-g76f33a7eedb4 Description A bug in the Linux kernel's tracing system has been fixed, which caused a wild-memory-access issue in the register synth event function. If set synth event print fmt...

PT-2022-38091

Уязвимость функций test gen synth cmd и test empty synth event модуля kernel/trace/synth event gen test.c поддержки трассировки ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-38074

Уязвимость функции register synth event модуля kernel/trace/trace events synth.c поддержки трассировки ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отка...

trace-cmd bug fix and enhancement update

An update is available for trace-cmd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9....

GSD-2022-1006783 rcu-tasks: Ensure RCU Tasks Trace loops have quiescent states

rcu-tasks: Ensure RCU Tasks Trace loops have quiescent states This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

CVE-2022-35719

IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...

Information disclosure

IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...

CVE-2022-35719

IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...

CVE-2022-35719

IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...

CVE-2022-35719

CVE-2022-35719 affects IBM MQ Internet Pass-Thru (IPT) versions 2.1, 9.2 LTS and 9.2 CD. The issue: when tracing is enabled, IPT stores potentially sensitive information in trace files that could be read by a local user. Impact is local confidentiality breach for trace data. Remediation remains: ...

IBM MQ Internet Pass-Thru 日志日志信息泄露漏洞

IBM MQ Internet Pass-Thru is an International Business Machines IBM product for supporting the implementation of messaging between remote sites on the Internet. The product is an extended functionality component of IBM MQ that serves as a protocol channel or proxy for establishing protocols durin...

PT-2022-35038 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the RCU Tasks Trace loops not having quiescent states. This is an automated identification of a potential security issue, but its actual impact and attack plausibility have...

Vulnerability fixed in IBM MQ

A vulnerability has been fixed in MQ Internet Pass-Thru. The vulnerability allows a local malicious party to potentially see sensitive information in trace files of the application when this feature is enabled. IBM has released updates to fix the vulnerabilities in MQ. For more information, see:...

PT-2022-22949

Name of the Vulnerable Software and Affected Versions IBM MQ Internet Pass-Thru versions 2.1, 9.2 LTS, and 9.2 CD Description The issue concerns the storage of potentially sensitive information in trace files by IBM MQ Internet Pass-Thru, which could be accessed by a local user. Recommendations F...

CVE-2022-35719: Insertion of Sensitive Information into Log File

IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...

kernel: scsi: lpfc: Fix call trace observed during I/O with CMF enabled

A vulnerability has been identified in the lpfc module within the Linux kernel. This flaw occurs because the driver attempts to access per-CPU data from a preemptible context using an incorrect function. This improper handling of critical data can lead to system instability and result in a...

PT-2025-18635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel. The issue occurs during the initialization of ip vs conn net init, where if the file ip vs conn or ip vs conn sync fails to be...

PT-2022-20978 · Gl.Inet · Gl-Inet Gl-Ax1800 Flint +1

Name of the Vulnerable Software and Affected Versions: gl-inet GL-MT300N-V2 Mango version 3.212 gl-inet GL-AX1800 Flint version 3.214 Description: The issue concerns command injection vulnerabilities. These vulnerabilities can be exploited via the ping addr and trace addr function parameters...