PT-2022-29378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30436

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30229

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29247

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description A potential issue exists where kmalloc array could return null, which may have security implications. The actual impact and likelihood of an attack have not been confirmed. Recommendations For...

PT-2022-29928

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30150

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: wc938x module. The actual impact and attack plausibility have not yet been proven. Recommendatio...

EulerOS 2.0 SP10 : gnupg2 (EulerOS-SA-2022-1486)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports ...

EulerOS 2.0 SP10 : gnupg2 (EulerOS-SA-2022-1505)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports ...

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-1486)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP spl_array Heap Buffer Overflow DoS

The vulnerability of the ext/spl/splarray.c component of the PHP interpreter exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or potentially have other adverse effects using specially created serialized data...

Exploit for Prototype Pollution in Qs_Project Qs

PoC exploit for CVE-2022-24999, a qs prototype poisoning vulnera...

Debian: Security Advisory (DLA-2983-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-28049

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

Nginx code-related vulnerabilities

A denial of service vulnerability exists in Nginx NJS version 0.7.2, which stems from the njsvmcodearray component in /src/njsvmcode.c containing a NULL pointer dereference. An attacker could exploit this vulnerability to cause the program to crash...

CVE-2021-21949

The CVE-2021-21949 entry maps to a concrete vulnerability in Accusoft ImageGear 19.10: an improper array index validation in the JPEG-JFIF Scan header parser can cause an out-of-bounds write, leading to potential code execution. The root cause is a mismatch in how SOS data references AC/DC Huffma...

CVE-2022-27008

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

Nginx security vulnerabilities

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the US-based Nginx Corporation. A security vulnerability exists in Nginx njs version 0.7.2, which stems from a type obfuscated in Array.Prototype.Concat is susceptible to a buffer overflow when attaching ...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1402)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla: Incorrect AliasSet used in JIT Codegen

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read...

Mozilla: Incorrect AliasSet used in JIT Codegen

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read...