[SECURITY] Fedora 36 Update: golang-github-magefile-mage-1.11.0-5.fc36

A Make/rake-like dev tool using Go...

Orwell-Dev-Cpp Hijacking Vulnerability

Orwell-Dev-Cpp is a free, portable, fast and simple C/C++ IDE. A hijacking vulnerability exists in Orwell-Dev-Cpp v5.11, which can be exploited by an attacker to execute arbitrary code via a specially crafted exe file...

CVE-2022-33037

A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33036

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33037

CVE-2022-33037 affects Orwell-Dev-Cpp v5.11, where a binary hijack allows an attacker to execute arbitrary code by processing a crafted .exe file. The vulnerability is documented across multiple sources (e.g., NVD, Red Hat, CNVD) with the described impact being code execution on local access. The...

CVE-2022-33037

A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33036

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33036

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33036

CVE-2022-33036 concerns a binary hijack in Embarcadero Dev-CPP v6.3 that enables arbitrary code execution via a crafted .exe file. The effect is tied to a local attack vector with user interaction required, as documented by NVD and corroborated by Red Hat and OSV/CVE records. The root cause descr...

CVE-2022-33037: Uncontrolled Search Path Element

A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...

Orwell-Dev-Cpp code issues and vulnerabilities

Orwell-Dev-Cpp is a free, portable, fast and simple C/C++ IDE. A hijacking vulnerability exists in Orwell-Dev-Cpp v5.11, which can be exploited by an attacker to execute arbitrary code via a specially crafted exe file...

PT-2022-21661

Name of the Vulnerable Software and Affected Versions Embarcadero Dev-CPP version 6.3 Description A binary hijack allows attackers to execute arbitrary code via a crafted .exe file. Recommendations For Embarcadero Dev-CPP version 6.3, at the moment, there is no information about a newer version...

PT-2022-21662

Name of the Vulnerable Software and Affected Versions Orwell-Dev-Cpp version 5.11 Description A binary hijack allows attackers to execute arbitrary code via a crafted .exe file. Recommendations For Orwell-Dev-Cpp version 5.11, consider avoiding the use of crafted .exe files until a patch is...

CVE-2022-33036: Uncontrolled Search Path Element

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

GSD-2022-1004084 NFC: NULL out the dev->rfkill to prevent UAF

NFC: NULL out the dev-rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

PT-2022-31554

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.46 Description A potential issue exists in the rpmsg virtio add ctrl dev function, which may lead to a double free error. The actual impact and attack plausibility have not yet been proven...

PT-2022-31404

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns error handling in the mt8173 max98090 dev probe function. It was introduced in version v4.2 and fixed in version v5.17.14. The actual impact and attack plausibility have no...

PT-2022-31418

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the ALSA jack, where access to input dev occurs under a mutex. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32327

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue is related to a potential deadlock in the Linux Kernel, specifically with the pci dev lock function and sriov numvfs store. The actual impact and attack plausibility have not yet be...

PT-2022-32052

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the ALSA: jack, where access to input dev is done under a mutex. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...