PT-2022-34562 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to an overflow implicit truncation warning in the irqchip/tegra component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-33926 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to a warning in the cpuinfo for CONFIG CPUMASK OFFSTACK. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to...

GSD-2022-1005454 net/mlx5: Avoid false positive lockdep warning by adding lock_class_key

net/mlx5: Avoid false positive lockdep warning by adding lockclasskey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit...

GSD-2022-1005358 iio: light: isl29028: Fix the warning in isl29028_remove()

iio: light: isl29028: Fix the warning in isl29028remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005343 md-raid10: fix KASAN warning

md-raid10: fix KASAN warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit 5f57843565131bb782388f9d993f9ee8f453dee1. For mor...

GSD-2022-1005260 usb: cdns3: fix random warning message when driver load

usb: cdns3: fix random warning message when driver load This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005179 dm raid: fix address sanitizer warning in raid_status

dm raid: fix address sanitizer warning in raidstatus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005177 ext4: fix warning in ext4_iomap_begin as race between bmap and write

ext4: fix warning in ext4iomapbegin as race between bmap and write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33712 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue is related to a false positive lockdep warning in the net/mlx5 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior t...

PT-2022-33365 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to an overflow implicit truncation warning in the irqchip/tegra component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33715 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a warning in OPP during probe in the pm helpers module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-5040 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...

PT-2022-5063 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier Description: The issue is related to an out-of-bounds write vulnerability in memory. Exploitation of this issue could allow an attacker to execute arbitrary...

CVE-2022-34747

creationtimestamp| type| source ---|---|--- 2022-09-07 08:13:33+00:00| seen| https://www.cert.at/de/warnungen/2022/9/remote-code-execution-schwachstelle-in-zyxel-nas-updates-verfugbar 2022-09-07 08:26:47+00:00| seen| https://t.me/thehackernews/2543 2022-09-07 08:32:56+00:00| seen|...

AVEVA Edge 2020 R2 SP1 and all prior versions

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: AVEVA Equipment: AVEVA Edge 2020 R2 SP1 and all prior versions Vulnerabilities: Insufficient UI Warning of Dangerous Operations, Uncontrolled Search Path Element, Deserialization of Untrusted Data, Improper Restriction of...

September 6, 2022, update for Excel 2013 (KB5002268)

September 6, 2022, update for Excel 2013 KB5002268 This article describes update 5002268 for Microsoft Excel 2013 that was released on September 6, 2022. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft...

MAL-2022-3247 Malicious code in funtion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 501077938fdff595541523797e68b1593506ab2dbebd6c2f4d34929227aef334 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

...

Firewall Bug Under Active Attack Triggers CISA Warning

Software running Palo Alto Networks’ firewalls is under attack, prompting U.S. Cybersecurity and Infrastructure Security Agency CISA to issue a warning to public and federal IT security teams to apply available fixes. Federal agencies urged to patch the bug by September 9. Earlier this month, Pal...

CVE-2021-28861

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple / at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states...