Out-of-bounds

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...

Out-of-bounds

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...

CVE-2022-38673

CVE-2022-38673 affects the face detect driver and relates to an out-of-bounds write caused by a missing bounds check. The impact stated across the provided sources is local denial of service in kernel space. The connected documents (Red Hat, OSV, NVD, etc.) consistently describe the same issue bu...

CVE-2022-38673

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...

CVE-2022-38672

CVE-2022-38672 affects the face detect driver and involves a missing bounds check that enables a local out-of-bounds write. This can lead to local denial of service in the kernel. Connected documents (OSV/NVD) confirm the same description; no exploit details, affected firmware versions, or patche...

CVE-2022-38673

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...

PT-2022-24521 · Unknown · Face Detect Driver

Name of the Vulnerable Software and Affected Versions: face detect driver affected versions not specified Description: The issue is related to a missing bounds check in the face detect driver, which could lead to a possible out of bounds write. This might result in a local denial of service in th...

CVE-2022-38672

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...

Tarfile: Exploiting the World With a 15-Year-Old Vulnerability

Tarfile: Exploiting the World With a 15-Year-Old Vulnerability By Trellix · September 21, 2022 This story was also written by Kasimir Schulz While investigating an unrelated vulnerability, Trellix Advanced Research Center stumbled across a vulnerability in Python’s tarfile module. Initially we...

PT-2025-41020

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the drm/amdgpu module within the Linux kernel, specifically within the hpd rx irq create workqueue function. If the creation of the work queue array for...

CVE-2022-20276

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates in ContentService, which allows checking the presence of an established account on the device due to a missing license check. An attacker...

CVE-2022-20242

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

Coffee Shop Cashiering System 1.0 SQL Injection

Exploit Title: Coffee Shop Cashiering System - Authenticated Time Based Sql injection Date: 27-06-2022 Exploit Author: syad Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/cscs.zip Version: 1.0 Tested on: Windows...

Malicious code in asset-detect-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f1bed965e937f905874b40b1b84c950a88fa75f246b833c791ffef97a1cf34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in asset-detect-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 604f819f0f5b6ab645d72fac4c1463c58bb06d5becbe0f97465ee7001b1c5e4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1140 Malicious code in asset-detect-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 604f819f0f5b6ab645d72fac4c1463c58bb06d5becbe0f97465ee7001b1c5e4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: perl-Encode-Detect

An update is available for perl-Encode-Detect. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

com.amazonaws:codedeploy (=1.15), com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner (>=1.0.3 <=1.0.5) +332 more potentially affected by CVE-2014-3663 via org.jenkins-ci.main:jenkins-core (>=1.566 <=1.582)

org.jenkins-ci.main:jenkins-core MAVEN version =1.566, =1.0.3, =1.0.0, =2.2.0, =2.0, =8.5.0, =1.2, =1.29, =1.0, =1.0, =1.00, =1.2 and more Source cves: CVE-2014-3663 Source advisory: OSV:GHSA-64MC-2M9P-23C8...

GHSA-X33V-F3GP-GW2C Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...