PT-2022-20021 · WordPress · Slickr Flickr Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Slickr Flickr WordPress plugin versions through 2.8.1 Description: The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks due to the lack of sanitization and escaping of its settings. This can occur eve...

PT-2022-19704 · WordPress · Badgeos

Name of the Vulnerable Software and Affected Versions: BadgeOS WordPress plugin versions prior to 3.7.1.3 Description: The issue concerns the BadgeOS WordPress plugin, which does not properly sanitise and escape parameters before using them in SQL statements via AJAX actions. This can lead to SQL...

PT-2022-18220 · WordPress · Cg Scroll To Top

Name of the Vulnerable Software and Affected Versions: Scroll To Top WordPress plugin versions prior to 1.4.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, in...

PT-2022-34072 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a fix for an address sanitizer warning in raid status. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-34059 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.18 through 5.10.137 Description: A memory leak issue exists inside XPD TX with mergeable. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.18 through...

PT-2022-34283 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to a refcount leak in the ap flash init function. It was introduced in version v4.7 and fixed in version v5.4.211. The actual impact and attack plausibility have not ye...

PT-2022-34041 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.138 Description: A potential security issue has been identified, related to a use-after-free condition in the cdns3 USB driver. The actual impact and attack plausibility have not yet been proven...

PT-2022-33766 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A potential buffer overflow issue exists due to the use of snprintf in the ASoC: SOF: debug component. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-33983 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.141 Description: The issue is related to the bpf, where packets with invalid pkt len are not properly handled, potentially leading to security vulnerabilities. The actual impact and attack plausibility hav...

PT-2022-33772 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to the btrfs filesystem, specifically in the prepare to relocate function, where the reloc control is not unset if a transaction commit fails. The actual impact and...

PT-2022-34224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.4.211 Description: The issue is related to the vboxguest component in the Linux Kernel, where the use of devm for irq is not recommended. The actual impact and attack plausibility have not yet been proven...

PT-2022-33728 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a missing of node put in octeon2 usb clocks start, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet bee...

PT-2022-34047 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: A buffer overflow issue exists in the sja1105 setup devlink regions function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33980 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.18 through 5.10.141 Description: A potential security issue exists due to a defer destroy workqueue call in the ieee802154/adf7242 module. The actual impact and attack plausibility have not yet been proven...

PT-2022-34544 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.327 Description: The issue is related to an overflow while configuring a loop. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.9.32...

PT-2022-33835 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A refcount leak was discovered in the mt8173 rt5650 dev probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-34114 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns the addition of multithread support for a DMA channel in the sf-pdma driver. It was introduced in version v5.5 and fixed in version v5.10.137. The actual impact and atta...

PT-2022-33946 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to a schedule out problem in the machine crash shutdown function. The actual impact and potential for attack have not been proven yet. Recommendations: For versions pri...

PT-2022-34215 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue concerns the ext4 file system, specifically avoiding resizing to a partial cluster size. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34545 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.327 Description: The issue is related to a data-race around sysctl net busy poll. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.11 and fixed in Linux...