kernel: dm: fix mempool NULL pointer race when completing IO

In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and will then dec md in-flight pending count. But if a task is swapping DM table at same time this can result in a crash due to...

dm-eichenauer.de Cross Site Scripting vulnerability OBB-2689477

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-2539 Malicious code in dm-podcast-web-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93a32eabcd198d5747f7b110d2f42aec6128f554bad7370bcfb169f39c07e5e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dm-podcast-web-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93a32eabcd198d5747f7b110d2f42aec6128f554bad7370bcfb169f39c07e5e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Haraj has cross-site scripting vulnerability

A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in some DM components. An attacker could exploit this vulnerability to execute...

CVE-2022-31300

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Cross site scripting

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2022-31300

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2022-31300

Haraj v3.7 has a cross-site scripting vulnerability in the DM Section component, enabling arbitrary scripts via a crafted POST request. The issue stems from insufficient data validation/filtering and output encoding in DM components, allowing attackers to inject and execute scripts (reported as a...

CVE-2022-20147

In nfadmchecksetconfig of nfadmmain.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

GSD-2022-1002408 dm ioctl: prevent potential spectre v1 gadget

dm ioctl: prevent potential spectre v1 gadget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1002154 dm integrity: fix memory corruption when tag_size is less than digest size

dm integrity: fix memory corruption when tagsize is less than digest size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit...

GSD-2022-1001945 dm integrity: fix memory corruption when tag_size is less than digest size

dm integrity: fix memory corruption when tagsize is less than digest size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.112 by commit...

GSD-2022-1001400 dm ioctl: prevent potential spectre v1 gadget

dm ioctl: prevent potential spectre v1 gadget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001058 dm ioctl: prevent potential spectre v1 gadget

dm ioctl: prevent potential spectre v1 gadget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

dm-serviceagentur.de Improper Access Control vulnerability OBB-2410118

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Pulian Technologies Limited Archer A54 Buffer Overflow Vulnerability

Tp-Link Archer A54 is a wireless dual-band router from Pulian Technologies Co. The Tp-Link Archer A54 router is vulnerable to a buffer overflow vulnerability, which stems from a stack overflow found in the function DM Fillobjbystr. An attacker could exploit this vulnerability to execute arbitrary...

Tp-link TL-WR841N Buffer Overflow Vulnerability (CNVD-2022-17026)

Tp-link TL-WR841N is a wireless router from China Pulian Tp-link.The Tp-link TL-WR841N router is vulnerable to a buffer overflow vulnerability, which stems from a stack overflow found in the dm fillObjByStr function. An attacker could exploit this vulnerability to execute arbitrary code...

CVE-2022-25062

TP-LINK TL-WR840NESV6.20180709 was discovered to contain an integer overflow via the function dmcheckString. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

Tp-Link Archer A54缓冲区错误漏洞

Tp-Link Archer A54 is a wireless dual-band router from Pulian Technologies Co. The Tp-Link Archer A54 router is vulnerable to a buffer overflow vulnerability, which stems from a stack overflow found in the function DM Fillobjbystr. An attacker could exploit this vulnerability to execute arbitrary...