Security Bulletin: IBM DataPower Gateway vulnerable to CSRF attack

Summary IBM DataPower Gateway is vulnerable to a cross-site request forgery attack against the Web UI. IBM has addressed the vulnerability. Vulnerability Details CVEID:CVE-2022-31773 DESCRIPTION: IBM DataPower Gateway is vulnerable to cross-site request forgery which could allow an attacker to...

PT-2022-24997 · Sophos · Sophos Mobile

Name of the Vulnerable Software and Affected Versions: Sophos Mobile versions 5.0.0 through 9.7.4 Description: An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises. This issue may lead to significant...

PT-2022-35611 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.221 Description: The issue is related to a potential null-deref in /proc/pid/smaps rollup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.19 and fixed in...

PT-2022-35238 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.15.75 Description: A potential security issue exists due to an xid leak in the cifs create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35231 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.39 through 5.15.75 Description: The issue is related to a null pointer access problem that occurs when the sfb init function fails. This problem was introduced in version 2.6.39 and fixed in version 5.15.76. The actu...

PT-2022-35088 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the drm/msm/dpu component, specifically with the indexing of dpu kms-hw vbif using vbif idx. This is a potential security vulnerability, although its actual impact and...

PT-2022-35706 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.218 Description: The issue concerns a problem with MBSSID elements in the wifi cfg80211/mac80211 component. It has been fixed in Linux Kernel version v5.4.218. The actual impact and attack plausibility have...

PT-2022-35839 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: The issue is related to a buffer overflow in debugfs. It was introduced in version v3.19 and fixed in Linux Kernel version v4.14.296. The actual impact and attack plausibility have not yet...

PT-2022-20918 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 8.0 through 9.2 LTS Description: The issue allows an authenticated and authorized user to cause a denial of service to the MQTT channels. Recommendations: For IBM MQ versions 8.0 through 9.2 LTS, update to a version that...

UBUNTU-CVE-2022-39392

Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator when the allocator is configured to give WebAssembly instances a maximum of zero pages of memory. In this configuration, the virtual memory mappi...

UBUNTU-CVE-2022-39328

Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patche...

CVE-2022-44796

An issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function that doesn't produce cryptographically...

CVE-2022-44795

An issue was discovered in Object First Ootbi BETA build 1.0.7.712. A flaw was found in the Web Service, which could lead to local information disclosure. The command that creates the URL for the support bundle uses an insecure RNG. That can lead to prediction of the generated URL. As a result, a...

CVE-2022-27894

The Foundry Blobster service was found to have a cross-site scripting XSS vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in stbijpegload. Remediation There is no fixed version for stb. References - GitHub Issue Credit: bufanremi...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE in the ExpressionContextImpl class via jexl.createExpressionexpression.evaluatecontext; functionality, due to improper user input validation. Remediation There is no fixed version for com.bstek.uflo:uflo-core...

PT-2022-5706 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR878 versions 1.02B04 through 1.02B05 Description: The issue is related to buffer overflow errors in the D-Link DIR878 wireless router's firmware. Exploitation of this issue may allow a remote attacker to execute arbitrary code...

Crowd DC Critical Security Misconfiguration Vulnerability - CVE-2022-43782

Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and call privileged endpoints in Crowd's REST API under the usermanagement path. This vulnerability can only be exploited by IPs specified under the crowd application...

CVE-2022-39348

Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host twisted.web.vhost.NameVirtualHost will return a NoResource resource which renders the Host header unescaped into the 404 response allowing HTML and scri...

PT-2022-11530 · Heron · Heron

Name of the Vulnerable Software and Affected Versions: Heron versions = 0.20.4-incubating Description: The issue is related to CRLF log injection due to the lack of escaping in log statements. This allows for potential log manipulation. To address this, an update to version 0.20.5-incubating is...