Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP CVE-2021-47619 A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw...

bio-metrie.info Cross Site Scripting vulnerability OBB-2355981

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-21678 User's bio visible even if profile is restricted in Discourse

Discourse is an open source discussion platform. Prior to version 2.8.0.beta11 in the tests-passed branch, version 2.8.0.beta11 in the beta branch, and version 2.7.13 in the stable branch, the bios of users who made their profiles private were still visible in the tags on their users' pages. The...

PT-2025-8251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the F2FS file system support module of the Linux kernel, specifically within the f2fs io schedule timeout function, can lead to an infinite loop when flushing node pages. This...

PT-2025-8095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the btrfs file system. The issue occurred during compressed reads, where the bio would be double completed on errors,...

PT-2025-8399

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel, specifically in the blk-throttle component. This issue occurs when a bio block I/O request is throttled and the BIO...

bio-vet.com Improper Access Control vulnerability OBB-2311516

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-30640

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.13 through 5.15 Description The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility have...

PT-2021-30571

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility have...

PT-2021-26576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility have...

PT-2021-26645

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.13 through 5.15 Description: The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility ha...

Exploit for Cross-site Scripting in Wp_Html_Author_Bio_Project Wp_Html_Author_Bio

CVE-2021-24545 현재는 plugin으로 배포가 중단되어 있는 플러그인에서 발견된 XSS 취약점입니다...

GSD-2021-1001879 blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu

blk-cgroup: blkcgroupbiostart should use irq-safe operations on blkg-iostatcpu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commi...

PT-2021-26349

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility ha...

PT-2021-30344

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility have...

bio-toyobo.cn Cross Site Scripting vulnerability OBB-2195045

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-26170

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.14.11 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves not calling rq qos ops-done bio if the bio isn't tracked. The actual impact and attack plausibilit...

PT-2021-30165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.11 Description The issue is related to a potential security vulnerability in the Linux Kernel, where the rq qos ops-done bio function is called even if the bio isn't tracked. The actual impact and attack...

CVE-2021-39349

The Author Bio Box WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /includes/admin/class-author-bio-box-admin.php file which allowed attackers with administrative user access to inject arbitrar...

CVE-2021-39349

The CVE describes a Stored Cross-Site Scripting vulnerability in the WordPress Author Bio Box plugin (affected versions up to 3.3.1; PatchStack notes up to 3.4.0). The root cause is insufficient input validation and sanitization across several parameters in includes/admin/class-author-bio-box-adm...