UVI-2021-1001931 comedi: vmk80xx: fix bulk-buffer overflow

comedi: vmk80xx: fix bulk-buffer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.292 by commit...

PT-2021-26421

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.9.289 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30396

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.4.291 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. It was introduced in version v2.6.31 and fixed in version v4.4.292. The actual impact and...

PT-2021-30492

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.4.158 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30542

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.10.78 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-26547

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.10.78 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-26613

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.14.17 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-26401

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.4.291 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. It was introduced in version v2.6.31 and fixed in version v4.4.292. The actual impact and...

PT-2021-26443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.14.254 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-26497

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.4.158 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-26466

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.19.216 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-26685

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.31 through 5.15.1 Description: The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-30416

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.9.289 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30438

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.14.254 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-30461

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.19.216 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. It was introduced in version v2.6.31 and fixed in version v4.19.217. The actual impact and...

Contact Form 7 Database Addon < 1.2.6.1 - Arbitrary Form Deletion via CSRF

The plugin does not have CSRF check when processing bulk actions, which could allow attackers to make logged in admin delete arbitrary forms for example...

Debian DSA-5001-1 : redis - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5001 advisory. Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary cod...

Cross-site Scripting (XSS) - Generic in snipe/snipe-it

Description XSS in bulk audit function via the asset tag parameter Proof of Concept 1: Go to http:///hardware/bulkaudit feature 2: Use alertdocument.domain as "Asset Tag" parameter 3: Click "Audit", the XSS should be triggered via the message Asset Tag ASSETTAG not found. Impact This vulnerabilit...

URL Shortify < 1.5.1 - Arbitrary Link/Group Deletion via CSRF

The plugin does not have CSRF check in place when bulk-deleting links or groups, which could allow attackers to make a logged in admin delete arbitrary link and group via a CSRF attack. https://example.com/wp-admin/admin.php?page=uslinks&action=bulkdelete&linkids=1...

Bulk Datetime Change < 1.12 - Missing Authorisation

The plugin does not enforce capability checks which allows users with Contributor roles to 1 list private post titles of other users and 2 change the posted date of other users' posts. Run on "Bulk Datetime Change" page: jQuery.post"https://example.com/wp-admin/admin.php?page=bulkdatetimechange",...