CVE-2022-2701: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Simple E-Learning System. This vulnerability affects unknown code of the file /claireblake. The manipulation of the argument Bio leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...

PT-2022-18182

Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-Learning System affected versions not specified Description A problematic vulnerability was found in the SourceCodester Simple E-Learning System, affecting unknown code of the file /claire blake. The manipulation of the...

Simple e-Learning System Cross-Site Scripting Vulnerability

Simple e-Learning System is a simple e-learning system from Carlo Montero's personal developer. version 1.0 of Simple e-Learning System is vulnerable to a cross-site scripting vulnerability that stems from the lack of a Bio parameter in the file /vcs/claireblake to filter the user-supplied data a...

CVE-2022-2396: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0. Affected by this vulnerability is an unknown functionality of the file /vcs/claireblake. The manipulation of the argument Bio with the input " leads to cross site scripting. The attack can be...

PT-2022-16371

Name of the Vulnerable Software and Affected Versions SourceCodester Simple e-Learning System version 1.0 Description A problematic issue was found in the system, affecting an unknown functionality of the file /vcs/claire blake. The manipulation of the Bio argument with the input...

Simple e-Learning System 跨站脚本漏洞

Simple e-Learning System is a simple e-learning system from Carlo Montero's personal developer. version 1.0 of Simple e-Learning System is vulnerable to a cross-site scripting vulnerability that stems from the lack of a Bio parameter in the file /vcs/claireblake to filter the user-supplied data a...

GSD-2022-1003731 bfq: Update cgroup information before merging bio

bfq: Update cgroup information before merging bio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003556 bfq: Update cgroup information before merging bio

bfq: Update cgroup information before merging bio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003061 blk-throttle: Set BIO_THROTTLED when bio has been throttled

blk-throttle: Set BIOTHROTTLED when bio has been throttled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003019 bfq: Update cgroup information before merging bio

bfq: Update cgroup information before merging bio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002676 bfq: Update cgroup information before merging bio

bfq: Update cgroup information before merging bio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns the bfq update of cgroup information before merging bio. It was introduced in version v4.12 and fixed in version v5.15.46. The actual impact and attack plausibility have no...

PT-2022-31994

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue concerns the bfq update of cgroup information before merging bio. It was introduced in version v4.12 and fixed in version v5.4.198. The actual impact and attack plausibility have no...

PT-2022-31819

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the bfq update cgroup information before merging bio. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-31282

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns the bfq update cgroup information before merging bio. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30939

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the bfq update of cgroup information before merging bio. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

GHSA-H6C8-RG87-F3PC Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for...

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for...

Unbreakable Enterprise kernel security update

4.14.35-2047.512.6 - Revert 'rds/ib: recover rds connection from stuck rx path' Rohit Nair Orabug: 34039271 - uek-rpm: update kABI lists for new symbols Saeed Mirzamohammadi Orabug: 33993774 4.14.35-2047.512.5 - netfilter: nftables: initialize registers in nftdochain Pablo Neira Ayuso Orabug:...

GSD-2022-1001600 block: fix rq-qos breakage from skipping rq_qos_done_bio()

block: fix rq-qos breakage from skipping rqqosdonebio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...