Discourse 跨站脚本漏洞

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features.A cross-site scripting vulnerability exists in versions prior to Discourse DiscoTOC 2.1.0, which stems from the lack of escaping and filtering of input data on pages that can...

Sourcecodester Multi Restaurant Table Reservation System 1.0 - SQL Injection

Sourcecodester Multi Restaurant Table Reservation System 1.0 contains a SQL injection vulnerability via the file view-chair-list.php. It does not perform input validation on the tableid parameter, which allows unauthenticated SQL injection. An attacker can send malicious input in the GET request ...

Ubuntu 20.04 LTS : Linux kernel (GKE) vulnerabilities (USN-5648-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5648-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

Privilege Escalation

pinot-controller is vulnerable to privilege escalation. The vulnerability exists because the isDisableIngestionGroovy function of ControllerConf.java does not properly disable groovy functionality by default allowing an attacker to modify table-level config or broker/controller config to turn it ...

SUSE: Security Advisory (SUSE-SU-2022:3401-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5639-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5639-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

Ubuntu 22.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-5640-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5640-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

Security Bulletin: Unauthorized Access to Table Vulnerability in DB2 (CVE-2012-0709)

Abstract Vulnerability in IBM DB2 could allow an authenticated user to view data from a table to which they do not have privilege. Content VULNERABILITY DETAILS CVE ID: CVE-2012-0709 DESCRIPTION: The IBM DB2 products listed below contain a security vulnerability which would allow an authenticated...

Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000, and D5100 and IBM Smart Analytics System 1050, 2050, 5600, 5710, 7600, 7700 and 7710 are affected by an unauthorized access to table vulnerability in IBM DB2 (CVE-2013-4033)

Abstract A vulnerability in IBM DB2 for Linux, UNIX, and Windows could allow an authenticated user holding EXPLAIN authority to temporarily gain SELECT, INSERT, UPDATE or DELETE privilege on a table. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-4033 IBM InfoSphere Balanced Warehouse C3000,...

Security Bulletin: Unauthorized Access to Table Vulnerability in DB2 (CVE-2013-4033)

Abstract A vulnerability in IBM DB2 could allow an authenticated user holding EXPLAIN authority to temporarily gain SELECT, INSERT, UPDATE or DELETE privilege on a table. Content VULNERABILITY DETAILS CVE ID: CVE-2013-4033 DESCRIPTION: The IBM DB2 products listed below contain a security...

UBUNTU-CVE-2022-35094

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...

mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.

...

GSD-2022-1005851 KVM: s390: pv: leak the topmost page table when destroy fails

KVM: s390: pv: leak the topmost page table when destroy fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005593 KVM: s390: pv: leak the topmost page table when destroy fails

KVM: s390: pv: leak the topmost page table when destroy fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34109 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A potential security issue exists where the topmost page table may be leaked when a destroy operation fails. The actual impact and attack plausibility have not yet been proven...

GSD-2022-1004998 drm/amd/pm: Fix a potential gpu_metrics_table memory leak

drm/amd/pm: Fix a potential gpumetricstable memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.7 by commit...

Privilege Escalation

linux is vulnerable to Privilege Escalation. The vulnerability exists in nftablesapi.c function in nftables cross-table in the linux kernel which will allow a local privileged attacker to cause a use-after-free problem at the time of table deletion...

Out Of Bound Access

sqlite3 is vulnerable to out-of-bound access. The vulnerability exists through ALTER TABLE for views that have a nested FROM clause which allows an attacker to access information...

PT-2022-33414 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the ASoC Intel avs module, where a lookup table is used to create modules. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-33503 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A potential security issue exists where the topmost page table may be leaked when a destroy operation fails. The actual impact and attack plausibility of this issue have not yet been proven...