PHP FTP Genlist Code Execution

The vulnerability of the ftpgenlist function ext/ftp/ftp.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GSD-2022-1001546 net: asix: add proper error handling of usb read errors

net: asix: add proper error handling of usb read errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001471 btrfs: do not double complete bio on errors during compressed reads

btrfs: do not double complete bio on errors during compressed reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001470 btrfs: handle csum lookup errors properly on reads

btrfs: handle csum lookup errors properly on reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001146 btrfs: handle csum lookup errors properly on reads

btrfs: handle csum lookup errors properly on reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29506

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the handling of USB read errors in the Linux Kernel. It was introduced in version v4.9 and fixed in version v5.17.2. The actual impact and attack plausibility have not yet...

PT-2022-29743

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to handling csum lookup errors properly on reads in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-30132

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns the handling of USB read errors in the Linux Kernel. It was introduced in version v4.9 and is fixed in version v5.15.33. The actual impact and attack plausibility have not...

PT-2022-29819

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns the handling of USB read errors in the Linux Kernel. It was introduced in version v4.9 and is fixed in version v5.16.19. The actual impact and attack plausibility have not...

PT-2022-29419

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to handling csum lookup errors properly on reads in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential issue exists where a NULL pointer dereference can occur, which may be related to memory allocation errors ENOMEM. The actual impact and likelihood of an attack have not been...

Cannot start app **** - Issue when Storefront STA's configure as https.

Issue accessing the url of storefront store through Citrix ADC. Users are able to access storefront, but when users try to open any application it gives an error: Cannot start app However, when accessing the storefront url internally using store URL, all the applications open without problems,...

PT-2022-2568 · Fanuc · Fanuc Roboguide

Name of the Vulnerable Software and Affected Versions: FANUC ROBOGUIDE affected versions not specified Description: The issue is related to errors in assigning permissions for files, which can allow an attacker to gain privilege escalation. It is also associated with misconfigured binaries,...

Initial StakedCitadel deposit with amount=1 wei causes very expensive share price leading to precision errors and loss of funds

Lines of code Vulnerability details Impact The first depositor into StakedCitadel is able to maliciously manipulate the share price by depositing the lowest possible amount 1 wei and then artificially blowing up the StakedCitadel Citadel token balance. Following depositors will loose their...

PT-2022-2518

Name of the Vulnerable Software and Affected Versions ClamAV versions 0.103.5 and earlier ClamAV versions 0.104.0 through 0.104.2 Description A vulnerability in the TIFF file parser of Clam AntiVirus could allow an unauthenticated, remote attacker to cause a denial of service condition on an...

Atlassian Confluence Server File Read

The vulnerability of the Atlassian Confluence Server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files...

Linux Direct Memory Access Privilege Escalation

The vulnerability of the Direct Memory Access DMA subsystem in Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CAPITAL VSTAR APOGEE MBC APOGEE MEC APOGEE PXC TAL

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing the TCP header. Exploiting this vulnerability can allow an attacker to gain access to protected informatio...

PT-2022-3558 · Hotdog · Hotdog

Name of the Vulnerable Software and Affected Versions: Hotdog versions prior to 1.0.1 Description: The issue is related to errors in access control, allowing a container to gain full privileges on the host and bypass restrictions set on the container. This could enable an attacker to elevate thei...

Internet Information Services FTP Network Services Unauthorized Access

The vulnerability of the Internet Information Services FTP protocol in Windows operating systems is related to errors during FTP data exchange. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using specially crafted FTP commands...