PT-2026-98226

Name of the Vulnerable Software and Affected Versions TREK versions prior to 3.3.0 Description The get trip summary function in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring the trips:read scope. This allows a token granted only unrelated capabilities,...

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel component is related to the assignment of the zero pointer TZGETTRIP. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2022-48915

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

DEBIAN-CVE-2022-48915

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

UBUNTU-CVE-2022-48915

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

kernel: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

PT-2022-28984

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.13 Description The issue is related to a NULL pointer dereference in the TZ GET TRIP function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29111

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.104 Description The issue is related to a NULL pointer dereference in the thermal core, specifically in the TZ GET TRIP function. The actual impact and attack plausibility have not yet been proven...

PT-2022-29052

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description The issue is related to a NULL pointer dereference in the TZ GET TRIP function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

SQL Injection Vulnerability in VOA (Pengwei) System name parameter

Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system name parameter exists SQL injection vulnerability, the vulnerability URL is http://demo.kmpsoft.com/MyWorkflow/WFGetTripNo.aspx. Attackers can use the...