KLA12517 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Input can...

PT-2022-2411

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.41 Microsoft Edge affected versions not specified Description The issue is related to insufficient data validation in Dev Tools, which can be exploited by a remote attacker to bypass content security...

GSD-2022-1002515 llc: only change llc->dev when bind() succeeds

llc: only change llc-dev when bind succeeds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.309 by commit...

GSD-2022-1002387 gcc-plugins: latent_entropy: use /dev/urandom

gcc-plugins: latententropy: use /dev/urandom This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1002158 gcc-plugins: latent_entropy: use /dev/urandom

gcc-plugins: latententropy: use /dev/urandom This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit...

GSD-2022-1002157 ipv6: fix panic when forwarding a pkt with no in6 dev

ipv6: fix panic when forwarding a pkt with no in6 dev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit...

GSD-2022-1001951 gcc-plugins: latent_entropy: use /dev/urandom

gcc-plugins: latententropy: use /dev/urandom This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.112 by commit...

GSD-2022-1001933 llc: only change llc->dev when bind() succeeds

llc: only change llc-dev when bind succeeds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.32 by commit...

GSD-2022-1001647 gcc-plugins: latent_entropy: use /dev/urandom

gcc-plugins: latententropy: use /dev/urandom This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit...

GSD-2022-1000963 gcc-plugins: latent_entropy: use /dev/urandom

gcc-plugins: latententropy: use /dev/urandom This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

dev-socio.themaiapp.com Cross Site Scripting vulnerability OBB-2552260

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-30075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and fix...

PT-2022-30615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

PT-2022-29761

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and fix...

PT-2022-30698

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

PT-2022-30499

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and fix...

PT-2022-30333

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

PT-2022-29361

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a possible overflow on 'first minor' in the nbd dev add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29368

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a possible overflow on the first minor variable in the nbd dev add function. This potential security issue was introduced in version v4.11 and is fixed in Linux Kernel...

PT-2022-29573

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.17.1 Description A use-after-free issue was discovered in the dm cleanup zoned dev function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.14...