GSD-2022-1004049 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1003528 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

CVE-2022-31299

Haraj v3.7 was discovered to contain a reflected cross-site scripting XSS vulnerability in the User Upgrade Form...

Cross site scripting

Haraj v3.7 was discovered to contain a reflected cross-site scripting XSS vulnerability in the User Upgrade Form...

CVE-2022-31299

Haraj 3.7 contains a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form. The NVD/Nuclei entries describe a reflected XSS that could allow an attacker to execute malicious scripts in a victim’s browser, potentially enabling credential theft and session-related attacks. An ...

CVE-2022-31299

Haraj v3.7 was discovered to contain a reflected cross-site scripting XSS vulnerability in the User Upgrade Form...

CVE-2022-31301

Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...

CVE-2022-31298

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Cross site scripting

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2022-31301

Haraj v3.7 contains a stored XSS vulnerability in the Post Ads component. The CVE-2022-31301 entry aligns with multiple sources (NVD, Red Hat, CNVD, CNNVD, CVE.org) describing a stored XSS in Haraj’s Post Ads. An exploit exists on GitHub (Exploit for Cross-site Scripting in Angtech Haraj) detaili...

CVE-2022-31301

Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...

CVE-2022-31298

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2022-31298

Haraj v3.7 contains a cross-site scripting (XSS) vulnerability in the ads comments section that allows execution of arbitrary web scripts or HTML via a crafted POST request. The CVE description is corroborated by multiple sources across CVE records (NVD, CNVD, Red Hat, etc.), all referencing the ...

CVE-2022-31300

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Cross site scripting

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2022-31300

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2022-31300

Haraj v3.7 has a cross-site scripting vulnerability in the DM Section component, enabling arbitrary scripts via a crafted POST request. The issue stems from insufficient data validation/filtering and output encoding in DM components, allowing attackers to inject and execute scripts (reported as a...

Haraj 跨站脚本漏洞

A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a stored cross-site scripting XSS vulnerability contained in the Post Ads component. An attacker could exploit this vulnerability to conduct cross-site...

GSD-2022-1002259 media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED

media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2021-1002559 tcp: fix page frag corruption on page fault

tcp: fix page frag corruption on page fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...