794 matches found
SUSE CVE-2017-7518
A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exceptionDB being raised in the guest stack. A user/process inside a guest could use this flaw to...
SUSE CVE-2022-22743
When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...
The Hunt for the Kingpin Behind AlphaBay, Part 6: Endgame
With AlphaBay shuttered, Operation Bayonet enters its final phase: driving the site’s refugees into a giant trap. But one refugee hatched his own plan...
PT-2022-34897 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v6.0.6 Description: The issue is related to missing SIGTRAPs in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.13 through...
UBUNTU-CVE-2022-39394
Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of the wasmtimetrapcode does not match its declared signature in the wasmtime/trap.h header file. This discrepancy causes the function implementation to...
Wasmtime 缓冲区错误漏洞
Wasmtime, a Bytecode Consortium project, is a standalone wasm optimization runtime for WebAssembly and WASI only. A buffer error vulnerability exists in Wasmtime versions prior to 2.0.2, which stems from an out-of-bounds write to its wasmtimetrapcode C API function...
CVE-2022-39394
Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of the wasmtimetrapcode does not match its declared signature in the wasmtime/trap.h header file. This discrepancy causes the function implementation to...
Out of bounds write in `wasmtime_trap_code` C API function
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-h84q-m8rr-3v9q. For more information see the GitHub-hosted security advisory...
PT-2022-24953 · Wasmtime · Wasmtime
Name of the Vulnerable Software and Affected Versions: Wasmtime versions prior to 2.0.2 Description: There is a bug in Wasmtime's C API implementation where the definition of the wasmtime trap code does not match its declared signature in the wasmtime/trap.h header file. This discrepancy causes t...
Unauthenticated, Stored XSS to RCE via SNMP Trap
Description LibreNMS offers the ability to handle SNMP traps as documented here. One of the SNMP trap handlers called HPFault creates an event with the message "Fault - Unhandled ..." when receiving a trap with an unknown type. The type of this event is set to the received, unknown type, which is...
GSD-2022-1003256 SUNRPC: Trap RDMA segment overflows
SUNRPC: Trap RDMA segment overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit ea26bf5eca1459b5a7824997d7823409ce38214e,...
PT-2022-31556
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to thread termination without CONFIG UBSAN TRAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-31258
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.17.14 Description The issue is related to thread termination without CONFIG UBSAN TRAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.15...
PT-2022-31519
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.46 Description The issue concerns a potential overflow in the SUNRPC Trap RDMA segment. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5....
PT-2022-30869
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.18.3 Description The issue concerns a potential overflow in the SUNRPC Trap RDMA segment. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.1...
PT-2022-30912
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to thread termination without CONFIG UBSAN TRAP. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.15 and fixed in Linux...
CVE-2016-6555
OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in...
CVE-2016-6555 OpenNMS Stored XSS via SNMP Trap Alerts
OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in...
CVE-2016-6555: Improper Neutralization of Input During Web Page Generation
OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in...
