CVE-2022-3858

CVE-2022-3858 affects the WordPress plugin Chaty / Floating Chat Widget prior to version 3.0.3. The issue is an SQL injection caused by improper sanitisation/escaping of a parameter before it is used in a SQL statement, making it exploitable by users with a role as low as admin. Documented impact...

PT-2022-26948 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 6.0.3 Description: A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script. The developer provides new patched releases for all versions since 3.7. Recommendations: For...

PT-2022-35079 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to memory corruption when recording errors during writeback in the iomap component. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-35033 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a shift-out-of-bounds problem in the intel rapl component of the powercap module. The actual impact and potential for attack have not been confirmed. Recommendations:...

PT-2022-35085 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns an error handling path in the da7219 register dai clks function. It was introduced in version v5.10 and fixed in version v6.0.3. The actual impact and attack plausibility...

PT-2022-35133 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the rpmsg char, where a double destroy of the default endpoint can occur. This problem was introduced in version v5.18 and is fixed in Linux Kernel version v6.0.3. The...

PT-2022-35029 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a use-after-free error on the source server when performing inter-server copy. This problem is noted in the context of NFSD. The actual impact and potential for attack...

PT-2022-35123 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a send buffer overflow in NFSv2 READDIR. It was introduced in version v5.16 and is fixed in Linux Kernel version v6.0.3. The actual impact and attack plausibility have not...

PT-2022-35042 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns recursive locking of direct mutex in ftrace modify direct caller. It was introduced in version v6.0 and fixed in version v6.0.3. The actual impact and attack plausibility...

PT-2022-35090 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A null pointer dereference bug was identified. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.17 and fixed in Linux Kernel version...

PT-2022-35165 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a NULL deference in the vdso join timens function when vfork is used. This problem was introduced in version v5.19 and is fixed in Linux Kernel version v6.0.3. The...

PT-2022-35103 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to handling the error returned from sctp auth asoc init active key. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35124 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a crafted negative i size in erofs, which may cause a warning due to an order greater than or equal to MAX ORDER. The actual impact and attack plausibility have not ye...

PT-2022-35053 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a null pointer dereference while calling getpeername in the iscsi tcp component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2022-35022 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential memory leak issue was identified in the ath11k mhi register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-35170 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a memory leak in the xhci alloc dbc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-35175 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the io uring/af unix component, where the garbage collection of registered files is deferred to the io uring release. This is an automated identification of a potentia...

PT-2022-34973 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A bounds check has been added on Transfer Tag in nvmet-tcp. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-35173 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns an error in the length of the VALIDATE NEGOTIATE INFO message in the cifs component. It was introduced in version v5.0 and fixed in version v6.0.3. The actual impact and...

PT-2022-34968 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a use-after-free UAF error in the hugetlb handle userfault function. The actual impact and attack plausibility have not yet been proven. It was introduced in version...