PT-2022-24821 · Unknown · Mcwebserver Minecraft Mod

Name of the Vulnerable Software and Affected Versions: McWebserver Minecraft Mod for Fabric and Quilt versions 0.1.2.1 and earlier McWebserver Minecraft Mod for Forge versions 0.1.1 and earlier Description: The McWebserver mod runs a simple HTTP server alongside the Minecraft server in separate...

PT-2022-25150 · Wasm3 · Wasm3

Name of the Vulnerable Software and Affected Versions: WASM3 version 0.5.0 Description: The issue is related to a segmentation fault in the op Select i32 srs component located in wasm3/source/m3 exec.h. This fault can be triggered, potentially leading to a crash or other unintended behavior. No...

PT-2022-23900 · Stealjs · Stealjs

Name of the Vulnerable Software and Affected Versions: stealjs steal version 2.2.4 Description: A Regular Expression Denial of Service ReDoS flaw was found in the software via the string variable in babel.js. This issue can cause a denial of service. Recommendations: For version 2.2.4, consider...

Escalation from admin to server admin when auth proxy is used

Grafana is an open-source platform for monitoring and observability. Versions prior to 9.1.6 and 8.5.13 are vulnerable to an escalation from admin to server admin when auth proxy is used, allowing an admin to take over the server admin account and gain full control of the grafana instance. All...

PT-2024-8456 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is caused by an API design decision in the Linux kernel's net/sched component, specifically in the taprio qdisc. When attempting full offload, the taprio qdisc starts...

PT-2022-12993 · Unknown · Ldap Connector

Name of the Vulnerable Software and Affected Versions: LDAP connector versions prior to 1.5.20.9 Description: The issue allows unauthenticated access when the LDAP connector is started with StartTLS configured. This problem is related to the LDAP connector, which is bundled with Identity Manageme...

PT-2022-25534 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions 1.6.0-639 and earlier Description: An issue was discovered in Bento4, where a NULL pointer dereference occurs in the AP4 StszAtom::WriteFields function. Recommendations: For Bento4 versions 1.6.0-639 and earlier, as a temporar...

GSD-2022-1005053 net/mlx5: Disable irq when locking lag_lock

net/mlx5: Disable irq when locking laglock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

PT-2022-33448 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a use-after-free crash in the dm sm register threshold callback function. It was introduced in version v3.10 and fixed in version v5.19.2. The actual impact and attac...

PT-2022-23113

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue occurs when the mlir::tfg::GraphDefImporter::ConvertNodeDef function...

PT-2022-23058

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The implementation of AvgPool3DGradOp does not fully validate the input orig inpu...

PT-2022-24584 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.709 B20210518 Description: The issue allows for the execution of arbitrary commands in the cstecgi.cgi file. Recommendations: For TOTOLINK T6 version 4.1.5cu.709 B20210518, consider disabling access to the...

PT-2022-33450 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns a stack-out-of-bound access in SPMI tracing functions. It was introduced in version v4.3 and fixed in Linux Kernel version v5.19.2. The actual impact and attack plausibili...

PT-2022-19415 · WordPress · Craw Data Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Craw Data WordPress plugin versions through 1.0.0 Description: The issue is related to the lack of nonce checks in the Craw Data WordPress plugin, which could allow attackers to make a logged-in admin change the url value, performing unwanted...

PT-2022-23053

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The UnbatchGradOp function in TensorFlow takes an argument id that is assumed to ...

UBUNTU-CVE-2022-39209

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior to 0.29.0.gfm.6 a polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent denial of service. Users may verify the...

PT-2022-7411 · Unknown +3 · Libmpdemux +3

Name of the Vulnerable Software and Affected Versions: mplayer version SVN-r38374-13.0.1 mencoder version SVN-r38374-13.0.1 Description: The issue is related to a buffer overflow vulnerability via the asf init audio stream function in the libmpdemux/asfheader.c file. This can lead to a denial of...

PT-2022-7420 · Mplayer +4 · Mplayer +4

Name of the Vulnerable Software and Affected Versions: MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow via the gen sh video function in mplayer/libmpdemux/demux mov.c. This can potentially allow an attacker to cause a...

PT-2022-7415 · Unknown +5 · Libmpdemux +5

Name of the Vulnerable Software and Affected Versions: MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Divide By Zero vulnerability via the demux avi read packet function in libmpdemux/demux avi.c. This vulnerability may allow an...

PT-2022-24600 · Mplayer +2 · Mplayer +2

Name of the Vulnerable Software and Affected Versions: mplayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow vulnerability via the play function of libaf/af.c:639. Recommendations: For mplayer version SVN-r38374-13.0.1,...