12405 matches found
PT-2022-35448 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a null pointer access in the cake init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...
PT-2022-35433 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.153 Description: The issue is related to an unreliable stack dump with gcov in the x86/unwind/orc component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2022-35558 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential memory leak was identified in the ext4 fc record modified inode function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-35085 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns an error handling path in the da7219 register dai clks function. It was introduced in version v5.10 and fixed in version v6.0.3. The actual impact and attack plausibility...
PT-2022-35553 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A memory leak was discovered in an error handling path in the nfsd component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2022-35555 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns the use of char for section boundaries in the machvec component. It was introduced in version v2.6.23 and fixed in version v5.10.150. The actual impact and attack...
PT-2022-35444 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a potential null-deref in /proc/pid/smaps rollup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.19 and fixed i...
PT-2025-49454
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s md/raid0 and raid10 subsystems related to discard sector handling. The issue arises because the code incorrectly sets the maximum discard sectors,...
PT-2022-35540 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns a memory corruption in ioctl. It was introduced in version v5.4 and fixed in Linux Kernel version v5.10.150. The actual impact and attack plausibility have not yet been...
PT-2022-27002 · Unknown · Concrete Cms
Name of the Vulnerable Software and Affected Versions: Concrete CMS formerly concrete5 versions 9.0.0 through 9.1.2 Concrete CMS formerly concrete5 versions prior to 8.5.10 Description: The issue allows the authTypeConcreteCookieMap table to be filled up, causing a denial of service due to high...
CVE-2022-36789
Improper access control in BIOS firmware for some IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-36400
Path traversal in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2022-23352 · Intel +1 · Intel Nuc Kit Wireless Adapter Drivers +1
Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue concerns path traversal in the installer software, potentially allowing an authenticated user to enable escalation of privilege via local...
PT-2022-21941 · Intel · Intel Wapi Security
Name of the Vulnerable Software and Affected Versions: IntelR WAPI Security software for Windows 10/11 versions prior to 22.2150.0.1 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable information disclosure via local access...
PT-2022-23627 · Intel · Intel Nuc 10 Performance Mini Pcs +1
Name of the Vulnerable Software and Affected Versions: IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs versions prior to FNCML357.0053 Description: The issue is related to improper access control in BIOS firmware, which may allow a privileged user to enable escalation of...
ownCloud 安全漏洞
ownCloud is a suite of personal cloud storage solutions from US-based ownCloud. A security vulnerability exists in ownCloud Server version 10.11 and earlier versions, which stems from a Docker image containing a misconfiguration that renders the trusteddomains configuration useless...
PT-2022-6358 · Dell Emc · Dell Emc Scg Policy Manager
Name of the Vulnerable Software and Affected Versions: Dell EMC SCG Policy Manager versions 5.10 through 5.12 Description: The issue is related to the use of a hard-coded cryptographic key in the Policy Manager software of Dell Secure Connect Gateway SCG. An attacker with knowledge of the...
ten-sing.com.tw Cross Site Scripting vulnerability OBB-3045752
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
VMware Workspace ONE Assist 访问控制错误漏洞
VMware Workspace ONE Assist is a real-time remote support solution from VMware, Inc. It allows VMware Workspace ONE UEM administrators to remotely access and troubleshoot devices in real-time while respecting end-user privacy. A security vulnerability exists in VMware Workspace ONE Assist prior t...
PT-2022-14682 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: A logic error in the code of WifiServiceImpl's factoryReset function can preserve WiFi settings, leading to a local issue across network factory resets. This issue does not require...