14880 matches found
GSD-2022-1004120 tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
tcp: Fix a data-race around sysctltcpnotsentlowat. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004110 ip: Fix data-races around sysctl_ip_prot_sock.
ip: Fix data-races around sysctlipprotsock. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004104 tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
tcp: Fix data-races around sysctltcpslowstartafteridle. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004102 gpio: gpio-xilinx: Fix integer overflow
gpio: gpio-xilinx: Fix integer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004099 mm/mempolicy: fix uninit-value in mpol_rebind_policy()
mm/mempolicy: fix uninit-value in mpolrebindpolicy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
PT-2022-33011
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.202 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-33202
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.15 through 4.9.320 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.15...
PT-2022-32899
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.15 through 5.10.126 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.15...
PT-2022-32741
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.15 through 5.15.50 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.15...
PT-2022-32538
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.15 through 5.18.7 Description The issue concerns commit metadata in postsuspend after a worker stops. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.15...
[SECURITY] Fedora 36 Update: commit-stream-0.1.2-8.fc36
OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API...
Ruby on Rails: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)
While building a PoC for CVE-2022-32209, I noticed that I could not fix my vulnerable application by updating https://github.com/rails/rails-html-sanitizer from 1.4.2 to 1.4.3 even though the Hackerone report about this vulnerability suggested that this should fix it see here:...
CVE-2022-36234
SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets...
Double free
SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets...
CVE-2022-36234
SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets...
DEBIAN-CVE-2016-3709
Possible cross-site scripting vulnerability in libxml after commit 960f0e2...
ALPINE-CVE-2016-3709
Possible cross-site scripting vulnerability in libxml after commit 960f0e2...
CVE-2016-3709
Possible cross-site scripting vulnerability in libxml after commit 960f0e2...
