CVE-2022-26100: Improper Validation of Array Index

SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may obtain privileged access to the system...

USN-5313-1 openjdk-lts, openjdk-17 vulnerabilities

It was discovered that OpenJDK incorrectly handled deserialization filters. An attacker could possibly use this issue to insert, delete or obtain sensitive information. CVE-2022-21248 It was discovered that OpenJDK incorrectly read uncompressed TIFF files. An attacker could possibly use this issu...

USN-5313-1: OpenJDK vulnerabilities

It was discovered that OpenJDK incorrectly handled deserialization filters. An attacker could possibly use this issue to insert, delete or obtain sensitive information. CVE-2022-21248 It was discovered that OpenJDK incorrectly read uncompressed TIFF files. An attacker could possibly use this issu...

There is a possibility of Token transfer getting stuck when using Erc1155BatchMessage

Lines of code Vulnerability details Impact In the event of user error while making the calldata for encodeTransferErc1155BatchMessage, where the size of the arrays of ids and amounts donot match, the message will get encoded due to no input validation, however the transfer will fail at the other...

PT-2025-8098

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.17-rc4 through 5.17-rc6 linux-image-5.10.142-1-generic linux-image-5.10.142-1-hardened linux-image-5.15.0-33-generic linux-image-5.15.0-33-hardened linux-image-5.15.0-33-lowlatency linux-image-5.15.0-70-generic...

Check if a value is in an array before a push

This issue has been created to upgrade a QA report submission to a medium severity finding. From Dravee: Check if a value is in an array before a push In NestedRecords.sol's store function, it's possible to push an existing address token several times in the same array File: NestedRecords.sol 130...

GSD-2022-1000611 KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}

KVM: x86: Free kvmcpuidentry2 array on post-KVMRUN KVMSETCPUID,2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

PT-2022-28658

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.101 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28579

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.267 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28596

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.230 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28720

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.2...

PT-2022-28619

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.18...

PT-2022-28566

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.302 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.9.30...

PT-2022-28798

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.1...

Imagemagick Studio ImageMagick Buffer Overflow Vulnerability (CNVD-2022-20173)

Imagemagick Studio ImageMagick is a set of open source image processing software from ImageMagick Studio Imagemagick Studio, Inc. The software can read, convert, or write images in a variety of formats.ImageMagick suffers from a buffer overflow vulnerability that stems from a heap-based buffer...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-1243)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-1227)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with...

UBUNTU-CVE-2021-3610

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault...

Heap overflow

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault...

Imagemagick Studio ImageMagick Buffer Error Vulnerability

Imagemagick Studio ImageMagick is a set of open source image processing software from ImageMagick Studio Imagemagick Studio, Inc. The software can read, convert, or write images in a variety of formats.ImageMagick suffers from a buffer overflow vulnerability that stems from a heap-based buffer...