PT-2022-29584

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential issue exists in the Linux Kernel, where the mm/pages alloc.c file may create ZONE MOVABLE beyond the end of a node. The actual impact and attack plausibility have not yet been...

PT-2022-30723

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to the creation of ZONE MOVABLE beyond the end of a node in mm/pages alloc.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-30547

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A potential issue exists in the Linux Kernel, where the mm/pages alloc.c file may create ZONE MOVABLE beyond the end of a node. The actual impact and attack plausibility have not yet been...

PT-2022-30407

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists due to the creation of ZONE MOVABLE beyond the end of a node in mm/pages alloc.c. The actual impact and attack plausibility have not yet been proven...

PT-2022-30784

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description A potential issue exists in the Linux Kernel, specifically in the mm/pages alloc.c file, where ZONE MOVABLE is created beyond the end of a node. The actual impact and attack plausibility have...

PT-2022-2589

Name of the Vulnerable Software and Affected Versions curl versions 7.65.0 through 7.82.0 Description The issue is related to the implementation of the configuration matching function in the curl utility, which does not properly handle IPv6 address zone IDs. This can lead to incorrect connections...

openSUSE 15 Security Update : pdns-recursor (openSUSE-SU-2022:0105-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0105-1 advisory. - In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8,...

The vulnerability of the Skype Extension for Chrome, a messaging application, stems from deficiencies in the system’s controlled area segmentation. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Skype Extension for Chrome is related to deficiencies in the system’s controlled zone segmentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2022-2516 · D Link · D-Link Dir-823-Pro

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823-Pro version 1.0.2 Description: The issue is related to the implementation of the SetNTPserverSeting function in the D-Link DIR-823-Pro wireless router's firmware, which fails to properly sanitize data at the management level...

PowerDNS Authoritative Server DoS Vulnerability (2022-01)

PowerDNS Authoritative Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PowerDNS Recursor DoS Vulnerability (2022-01)

PowerDNS Recursor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Insecure Authentication

PowerDNS has insecure authentication. The vulnerability exists due to a lack of insufficient validation of an IXFR end condition which causes incomplete zone transfers to be handled as successful transfers...

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

Authentication flaw

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

CVE-2021-40906

CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

CVE-2022-27227

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...

Input validation

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers...