CVE-2022-31127: Improper Neutralization of Input During Web Page Generation

NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromised input to the e-mail signin endpoint that contains some malicious HTML, tricking the e-mail server to send it to the user, so they can perform a phishing attack. Eg.:...

CVE-2022-34972

So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the attvalueid , manuvalueid , optvalueid , and subcatevalueid parameters at /index.php?route=extension/module/sofiltershopby/filterdata...

Sql injection

So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the attvalueid , manuvalueid , optvalueid , and subcatevalueid parameters at /index.php?route=extension/module/sofiltershopby/filterdata...

Sql injection

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

Security Bulletin: IBM Netezza as a Service is vulnerable to CVE-2022-0811

Summary IBM Netezza as a Service is vulnerable to arbitrary code execution as root on the cluster node due to CVE-2022-0811 although severity is low. Vulnerability is addressed by upgrading OCP version to 4.8.42. Vulnerability Details CVEID: CVE-2022-0811 DESCRIPTION: CRI-O could allow a remote...

Yokogawa Wide Area Communication Router

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Yokogawa Equipment: Wide Area Communication Router WAC Router Vulnerability: Use of Insufficiently Random Values 2. RISK EVALUATION Successful exploitation of this vulnerability could cause the functions provided by the WAC...

Exemys RME1

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Exemys Equipment: RME1 Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with network access to bypass authentication and...

GSD-2022-1003489 iommu/arm-smmu-v3: check return value after calling platform_get_resource()

iommu/arm-smmu-v3: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

GSD-2022-1003318 iommu/arm-smmu-v3-sva: Fix mm use-after-free

iommu/arm-smmu-v3-sva: Fix mm use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003227 iommu/arm-smmu-v3: check return value after calling platform_get_resource()

iommu/arm-smmu-v3: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1002917 iommu/arm-smmu-v3: check return value after calling platform_get_resource()

iommu/arm-smmu-v3: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

PT-2022-31490

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the iommu/arm-smmu-v3 component, where the return value after calling platform get resource is not checked. This could potentially lead to security vulnerabilities,...

PT-2022-30826

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to the iommu/arm-smmu-v3 component, where the return value after calling platform get resource is not checked. This is an automated identification of a potential security...

PT-2022-31581

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a use-after-free error in the iommu/arm-smmu-v3-sva component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31752

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to the iommu/arm-smmu-v3 component, where the return value after calling platform get resource is not checked. This could potentially lead to security vulnerabilities,...

PT-2022-30954

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.18.2 Description The issue is related to a use-after-free error in the iommu/arm-smmu-v3-sva component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31290

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a use-after-free error in the iommu/arm-smmu-v3-sva component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31028

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.1 through v5.18.2 Description The issue concerns the handling of priority masks in the irqchip/gic-v3 component. It was introduced in version v5.1 and fixed in version v5.18.3. The actual impact and attack plausibility...

PT-2022-31180

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to the iommu/arm-smmu-v3 component, where the return value after calling platform get resource is not checked. This is an automated identification of a potential security...

PT-2022-31360

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.1 through v5.17.13 Description The issue concerns the handling of priority masks in the irqchip/gic-v3 component. It was introduced in version v5.1 and fixed in version v5.17.14. The actual impact and attack plausibili...