Unbound DNS Resolver < 1.16.3 DoS Vulnerability

Unbound DNS Resolver is prone to a denial of service DoS vulnerability due to a SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2022-23711 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform versions prior to 2022.3.0 Description: The issue is related to insufficient sanitization of inputs in the QoE application input field, which could lead to stored and DOM-based XSS attacks. Recommendations: For versions...

Squid Buffer Overflow Vulnerability (SQUID-2022:2)

Squid is prone to a buffer overflow vulnerability in SSPI and SMB authentication. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

PT-2023-8133 · Apple +4 · Ipados +8

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14 Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is caused by a buffer overflow in the WebKit component of the macOS operating system. Exploitation of th...

Redis 7.0.x < 7.0.5 RCE Vulnerability

Redis is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

DEBIAN-CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

PT-2022-24198 · Woocommerce · Algolplus Advanced Dynamic Pricing For Woocommerce

Name of the Vulnerable Software and Affected Versions: AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin versions = 4.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2022-23934 · WordPress · Blossom Recipe Maker

Name of the Vulnerable Software and Affected Versions: Blossom Recipe Maker plugin versions 1.0.7 and earlier Description: The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited by contributors or users with higher...

PT-2022-23928 · WordPress · Themes Awesome History Timeline

Name of the Vulnerable Software and Affected Versions: Themes Awesome History Timeline plugin versions 1.0.5 and earlier Description: The issue is an Authenticated Stored Cross-Site Scripting XSS vulnerability. It affects the Themes Awesome History Timeline plugin at WordPress, allowing potential...

PT-2022-25469 · WordPress · Rate My Post – Wp Rating System

Name of the Vulnerable Software and Affected Versions: Rate my Post – WP Rating System plugin versions = 3.3.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

PT-2022-20014 · Rocket.Chat · Rocket.Chat Mobile

Name of the Vulnerable Software and Affected Versions: Rocket.Chat Mobile App versions prior to 4.14.1.22788 Description: An issue exists where an attacker with physical access to a mobile device can bypass local authentication, such as a PIN code, due to improper authentication. Recommendations:...

GHSA-28R9-PQ4C-WP3C personnummer/rust vulnerable to Improper Input Validation

This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severity. Impact This vulnerability impacts...

PT-2022-24187 · WordPress · Awesome Support

Name of the Vulnerable Software and Affected Versions: Awesome Support plugin versions = 6.0.7 Description: The issue is related to a Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerability. This vulnerability affects the Awesome Support plugin at WordPress, where users with a...

PT-2022-16358 · Keylime · Keylime

Name of the Vulnerable Software and Affected Versions: Keylime versions prior to 6.3.0 Description: A flaw in the Keylime agent's logic for checking secure mounts can be exploited, allowing secrets to be leaked to other processes on the host. This occurs because previously created unprivileged...

KLA19258 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Memory safety vulnerability can be exploited to execute...

PT-2022-28157 · Python +8 · Python +9

Name of the Vulnerable Software and Affected Versions: personnummer versions prior to 3.0.3 Dart versions prior to 3.0.3 C versions prior to 3.0.2 Elixir versions prior to 3.0.0 Go versions prior to 3.0.1 Java versions prior to 3.3.0 JavaScript versions prior to 3.1.0 Kotlin versions prior to 1.1...

PT-2022-34035 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: The issue is related to the gadgetfs ep io, where it waits until IRQ finishes. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-34157 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A refcount leak was discovered in the meson-secure-pwrc.c file. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34357 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue concerns the ext4 filesystem, specifically avoiding resizing to a partial cluster size. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34332 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.257 Description: A potential divide by zero error in the fb pm2fb function of the Linux Kernel may pose a security risk. The actual impact and attack plausibility have not yet been proven. Recommendations:...