623 matches found
PT-2022-36632 · Mozilla · Firefox +2
Name of the Vulnerable Software and Affected Versions: SeaMonkey versions prior to 2.53.14 Description: This issue concerns updates and security fixes for SeaMonkey. The updates include changes to DOM HTML element interfaces such as Embed, Object, Anchor, and others. Additionally, there are fixes...
Security update for seamonkey (important)
openSUSE Security Update: Security update for seamonkey Announcement ID: openSUSE-SU-2022:10150-1 Rating: important References: 1203916 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for seamonkey fixes the following...
PT-2022-34754 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to the removal of the QUEUE FLAG DEAD block. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0,...
GSD-2022-1006373 IB/core: Fix a nested dead lock as part of ODP flow
IB/core: Fix a nested dead lock as part of ODP flow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...
PT-2022-34592 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.8 Description: A potential security issue has been identified in the Linux Kernel, related to a nested dead lock as part of the ODP flow. The actual impact and attack plausibility have not yet been...
PT-2022-34657 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: A potential security issue has been identified in the Linux Kernel, related to a nested dead lock as part of the ODP flow. The actual impact and attack plausibility have not yet been prove...
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-21125 Incomplete cleanup in specific special regist...
gratefuldeadtributebands.com Cross Site Scripting vulnerability OBB-2649694
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Return value of send of ether not checked in _withdrawFromYieldPool
Lines of code Vulnerability details Impact A send of ether is done on LidoVault.sol:140. It is immediately followed by a return statement which will cause the function to return without checking the sent value on line 142. Line 142 is dead code. The impact is that the to address might not receive...
premier-deadsea.ch Cross Site Scripting vulnerability OBB-2558331
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Velociraptor Version 0.6.4: Dead Disk Forensics and Better Path Handling Let You Dig Deeper
Rapid7 is pleased to announce the release of Velociraptor version 0.6.4 – an advanced, open-source digital forensics and incident response DFIR tool that enhances visibility into your organization’s endpoints. This release has been in development and testing for several months now and has a lot o...
CLSA-2022-1650576075 Fix of 13 CVEs
CKSIX-267: USB: hso: Fix OOB memory access in hsoprobe/hsogetconfigdata - CKSIX-267: CVE-2019-14615: drm/i915/gen9: Clear residual context state on context switch - CKSIX-267: CVE-2020-8647, CVE-2020-8649: vgacon: Fix a UAF in vgaconinvertregion - CKSIX-267: CVE-2020-14331: vgacon: Fix for...
AZL-45369 CVE-2022-23901 affecting package re2c for versions less than 3.1-4
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...
CVE-2022-23901
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...
AZL-43948 CVE-2022-23901 affecting package re2c 2.0-1
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...
Stack overflow
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...
UBUNTU-CVE-2022-23901
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...
CVE-2022-23901
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...
PT-2022-16321 · Re2C +1 · Re2C +1
Name of the Vulnerable Software and Affected Versions: re2c version 2.2 Description: A stack overflow issue exists due to infinite recursion in the src/dfa/dead rules.cc file. Recommendations: For re2c version 2.2, at the moment, there is no information about a newer version that contains a fix f...
re2c 缓冲区错误漏洞
re2c is an open source language generator for C and C++. A security vulnerability exists in re2c, which suffers from a stack overflow due to an infinite recursion issue in src/dfa/deadrules.cc...