6499 matches found
PT-2022-29449
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A memory leak was discovered in the acrn dev ioctl function. The issue was introduced in version v5.12 and is fixed in Linux Kernel version v5.17.2. Recommendations For Linux Kernel versions...
PT-2022-29443
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.13 through v5.17.1 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-30431
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue is related to the use of /dev/urandom in gcc-plugins: latent entropy. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-30660
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to the use of /dev/urandom in gcc-plugins: latent entropy. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-29232
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue is related to the i2c device, where the return value is not checked when calling the dev set name function. This could potentially lead to security vulnerabilities, although the actu...
PT-2022-29920
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue is related to the use of /dev/urandom in gcc-plugins: latent entropy. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-29692
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a possible overflow on 'first minor' in nbd dev add. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...
PT-2022-30145
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns error handling in the mt8192 mt6359 dev probe function. It was introduced in version v5.15.17 and fixed in version v5.15.33. The actual impact and attack plausibility have...
PT-2022-30224
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue is related to the use of /dev/urandom in gcc-plugins: latent entropy. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.9 and fixe...
PT-2022-29452
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns a fix for the clk hw get clk function when the dev parameter is NULL. This change was introduced in version v5.11 and fixed in version v5.17.2. The actual impact and attack...
PT-2022-30021
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a possible overflow on the first minor variable in the nbd dev add function. The actual impact and attack plausibility have not yet been proven. Recommendations For...
Slackware: Security Advisory (SSA:2009-111-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-8438
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18-rc2 Description A use-after-free issue in the Linux kernel's NFC subsystem allows for potential exploitation. The nfc dev up function does not properly check if the rfkill object is unregistered before use,...
Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022
During the last week of March, three major tech companies - Microsoft, Okta, and HubSpot - reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group...
dev-lyss.gemeinde.ch Cross Site Scripting vulnerability OBB-2467521
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
DEBIAN-CVE-2022-1222
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-1222
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...
Design/Logic Flaw
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...
