GSD-2022-1005260 usb: cdns3: fix random warning message when driver load

usb: cdns3: fix random warning message when driver load This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2025-43079

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the xfrm subsystem related to memory management. Specifically, if ipcomp alloc scratches fails to allocate memory, the ipcomp scratches variable...

PT-2025-26077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The USB bus device driver in the Linux kernel contains an issue in the cdns3 allocate trb pool function within the drivers/usb/cdns3/cdns3-gadget.c module. The problem relates to...

GSD-2022-1001125 scsi: qla2xxx: Fix warning message due to adisc being flushed

scsi: qla2xxx: Fix warning message due to adisc being flushed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29722

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential issue in the Linux Kernel's qla2xxx scsi module may lead to a warning message due to adisc being flushed. The actual impact and attack plausibility have not yet been proven...

PT-2022-30045

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue in the Linux Kernel's qla2xxx scsi module may lead to a warning message due to adisc being flushed. The actual impact and attack plausibility have not yet been proven...

PT-2022-29398

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a warning message in the qla2xxx scsi driver due to adisc being flushed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2025-8394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the devfreq subsystem, specifically the rk3399 dmc driver. When the DFI device is unbound, an unbalanced...

Exploit for CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 allows warning-message injection...

Security feature bypass

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a Violation of Secure Design Principles that could lead to a Security feature bypass. Acrobat Reader DC displays a warning message when a user clicks on a PDF file, which coul...

CVE-2021-44714 Adobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a Violation of Secure Design Principles that could lead to a Security feature bypass. Acrobat Reader DC displays a warning message when a user clicks on a PDF file, which coul...

CVE-2021-44714: Violation of Secure Design Principles

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a Violation of Secure Design Principles that could lead to a Security feature bypass. Acrobat Reader DC displays a warning message when a user clicks on a PDF file, which coul...

PT-2022-2370

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to the fixed version Adobe Acrobat Reader versions prior to the fixed version Adobe Acrobat 2017 versions prior to the fixed version Adobe Acrobat Reader 2017 versions prior to the fixed version Adobe Acrobat 2020...

PT-2025-8461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dw9714 probe function within the drivers/media/i2c/dw9714.c module of the Linux kernel. The problem occurs when the driver fails to probe, leading to incorrect dat...

PT-2025-8086

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.0-rc1-autotest 1 Description A warning message issue in the Linux kernel has been resolved. The problem occurred due to adisc being flushed, resulting in a warning message where a different error code type d...

Cross-site Scripting (XSS)

roundcube:sid is vulnerable to cross-site scripting XSS attacks. The library is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message...

CVE-2021-44025

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message...

CVE-2021-44025

Roundcube webmail vulnerability CVE-2021-44025 (XSS) and CVE-2021-44026 (SQL injection) affect Roundcube before 1.3.17 and 1.4.x before 1.4.12. The XSS is triggered by handling an attachment filename extension in a MIME type warning message; the SQLi affects search/search_params handling. Publicl...

ASB-A-167403112

In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional...

Security update for crmsh (moderate)

openSUSE Security Update: Security update for crmsh Announcement ID: openSUSE-SU-2021:1087-1 Rating: moderate References: 1163460 1175982 1179999 1184465 1185423 1187553 SLE-17979 Cross-References: CVE-2020-35459 CVSS scores: CVE-2020-35459 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H...