GSD-2022-1004104 tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.

tcp: Fix data-races around sysctltcpslowstartafteridle. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004102 gpio: gpio-xilinx: Fix integer overflow

gpio: gpio-xilinx: Fix integer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004099 mm/mempolicy: fix uninit-value in mpol_rebind_policy()

mm/mempolicy: fix uninit-value in mpolrebindpolicy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

[SECURITY] Fedora 36 Update: commit-stream-0.1.2-8.fc36

OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API...

Ruby on Rails: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)

While building a PoC for CVE-2022-32209, I noticed that I could not fix my vulnerable application by updating https://github.com/rails/rails-html-sanitizer from 1.4.2 to 1.4.3 even though the Hackerone report about this vulnerability suggested that this should fix it see here:...

CVE-2022-36234

SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets...

Double free

SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets...

CVE-2022-36234

SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets...

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

DEBIAN-CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

ALPINE-CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

UBUNTU-CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2...

GHSA-8XWJ-2WGH-GPRH Lack of authentication mechanism in Jenkins Git Plugin webhook

Git Plugin provides a webhook endpoint at /git/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. For its most basic functionality, this endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. In Gi...

Lack of authentication mechanism in Jenkins Git Plugin webhook

Git Plugin provides a webhook endpoint at /git/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. For its most basic functionality, this endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. In Gi...

Lack of authentication mechanism in Jenkins Git Plugin webhook

Git Plugin provides a webhook endpoint at /git/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. For its most basic functionality, this endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. In Gi...

CVE-2022-36883

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...