PT-2022-30553

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A use-after-free issue was discovered in the jffs2 clear xattr subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-30647

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a use-after-free in jffs2 clear xattr subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-30411

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A use-after-free issue was discovered in the jffs2 clear xattr subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-30193

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A use-after-free issue was discovered in the jffs2 clear xattr subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-29889

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a use-after-free in jffs2 clear xattr subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29585

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a use-after-free in jffs2 clear xattr subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30726

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to a use-after-free in jffs2 clear xattr subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

CVE-2021-39078

IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589...

CVE-2022-27850

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

CVE-2022-27850

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

CVE-2022-27850: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

PT-2022-18639

Name of the Vulnerable Software and Affected Versions Simple Ajax Chat WordPress plugin versions = 20220115 Description The issue allows an attacker to perform actions such as clearing the chat log or deleting a chat message due to a Cross-Site Request Forgery CSRF flaw. Recommendations For Simpl...

Cyber Security WEBINAR — How to Ace Your InfoSec Board Deck

Communication is a vital skill for any leader at an organization, regardless of seniority. For security leaders, this goes double. Communicating clearly works on multiple levels. On the one hand, security leaders and CISOs must be able to communicate strategies clearly – instructions, incident...

Web Site Accepts Credit Card Data over cleartext HTTP

The remote web server contains at least one HTML form field that has an input of type 'cc-number' or similar. While this does not represent a risk to this web server per se, it does mean that the website may be accepting payment information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

DEBIAN-CVE-2022-26291

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...

PT-2022-7371

Name of the Vulnerable Software and Affected Versions lrzip version 0.641 Description The issue is related to a multiple concurrency use-after-free between the functions zpaq decompress buf and clear rulist. This allows attackers to cause a Denial of Service DoS via a crafted Irz file. The...

lrzip Resource Management Error Vulnerability

lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip v0.641, which stems from the inclusion of multiple concurrent post-release reuses between functions zpaqdecompressbuf and clearrulist. An attacker could cause a denial of servi...

IBM ISS BlackICE PC security vulnerabilities

IBM ISS BlackICE PC is a personal firewall/IDS for Windows desktops from International Business Machines IBM. A security vulnerability exists in IBM ISS BlackICE PC Protection that originates in a component update handler that allows for the transmission of data in clear text...

PT-2022-36894

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to a segmentation fault on an unknown address. The crash state includes functions such as sc file clear acl entries, sc file free, and...

3CX Phone System security vulnerabilities

The 3CX Phone is a software-based private branch exchange. It can be used with SIP standard based IP phones, SIP trunks and VoIP gateways to provide a complete communication solution. A security vulnerability exists in the 3CX Phone System that stems from the 3CX Phone System storing passwords in...