PT-2022-11701 · Openmrs · Openmrs Html Form Entry Ui Framework Integration Module

Name of the Vulnerable Software and Affected Versions: OpenMRS HTML Form Entry UI Framework Integration Module versions up to 1.x Description: A vulnerability has been found in the OpenMRS HTML Form Entry UI Framework Integration Module, which affects an unknown part and leads to cross-site...

Stored XSS in multiple menus

Description The demo website is affected of stored XSS at multiple menus. Proof of Concept 01 1. Access to the demo website http://demos4.softaculous.com/ 2. Login with admin user they provide, press on menu Uploader, in Uploader tab, try to upload whichever file then choose Media manager tab. 3...

CVE-2022-4579

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-46400

The Microchip RN4870 module firmware 1.43 and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112 allows attackers to bypass passkey entry in legacy pairing...

FlatPress < 1.3 Multiple Vulnerabilities

FlatPress is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Microchip RN4870 安全漏洞

The Microchip RN4870 is a Bluetooth low power module chip from Microchip, Inc. The Microchip RN4870 module firmware version 1.43 has a security vulnerability that stems from the ability to bypass the key entry in legacy pairing, and through this cryptographic input bypass, a man-in-the-middle MiT...

Path Traversal

atlas-repository is vulnerable to path traversal. The vulnerability exists because of the invalid handle of zip entry in the ZipSourceWithBackingDirectory.java, allowing an attacker to write an arbitrary file outside the expected directory in the web server filesystem...

编号撤回

This CVE number has been withdrawn...

CVE-2022-3605

creationtimestamp| type| source ---|---|--- 2022-12-12 20:21:01+00:00| seen| https://t.me/cibsecurity/54338 2025-04-22 15:03:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12858...

CVE-2022-43503

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-4243

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-32850. Reason: This candidate is a duplicate of CVE-2021-32850. Notes: All CVE users should reference CVE-2021-32850 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

编号撤回

This CVE number has been withdrawn...

GSD-2022-1008167 ext4: fix BUG_ON() when directory entry has invalid rec_len

ext4: fix BUGON when directory entry has invalid reclen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.224 by commit...

GSD-2022-1008078 ext4: fix BUG_ON() when directory entry has invalid rec_len

ext4: fix BUGON when directory entry has invalid reclen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

GSD-2022-1007973 arm64: entry: avoid kprobe recursion

arm64: entry: avoid kprobe recursion This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit 71d6c33fe223255f4416a01514da2c0bc3e283e7...

GSD-2022-1007964 ext4: fix BUG_ON() when directory entry has invalid rec_len

ext4: fix BUGON when directory entry has invalid reclen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...

GSD-2022-1007808 ext4: fix BUG_ON() when directory entry has invalid rec_len

ext4: fix BUGON when directory entry has invalid reclen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

PT-2022-36228 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It is related to avoiding kprobe recursion in the arm64 entry. The actual impact and attack plausibility have not...

PT-2022-36219 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: A potential issue exists in the ext4 file system, where a directory entry with an invalid rec len could trigger a BUG ON condition. The actual impact and attack plausibility of this issue...

PT-2022-36063 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to the ext4 file system, where a directory entry with an invalid rec len can trigger a BUG ON condition. The actual impact and potential for exploitation have not been...