Sanitization Management System Cross-site Scripting Vulnerability

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System, which originates from unknown functionality in the component the file admin/?page=systeminf, and can be exploited by an attack...

PT-2022-25114 · Sourcecodester · Sourcecodester Sanitization Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sanitization Management System affected versions not specified Description: A problematic vulnerability was found in the SourceCodester Sanitization Management System, affecting an unknown functionality of the file...

PT-2022-35860

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.296 Description A null pointer dereference issue was discovered in the ext4 write info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-35920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A null pointer dereference issue was discovered in the ext4 write info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-35471

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description A potential memory leak issue exists in the xhci alloc stream info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-35404

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.15.74 Description The issue concerns an error in the length of the VALIDATE NEGOTIATE INFO message in the cifs component. The actual impact and potential for attack have not been proven yet. Recommendation...

PT-2022-35821 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: A potential memory leak issue was identified in the xhci alloc stream info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35561

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description A null pointer dereference issue was discovered in the ext4 write info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-35787 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A null pointer dereference issue was discovered in the ext4 write info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

Information disclosure

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

Authentication flaw

Improper authentication in the IntelR SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-27233

XML injection in the QuartusR Prime Programmer included in the IntelR Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access...

PT-2025-49700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the ocxl module. Specifically, a potential name leak can occur within the ocxl file register afu function. If the device register function...

PT-2022-6358 · Dell Emc · Dell Emc Scg Policy Manager

Name of the Vulnerable Software and Affected Versions: Dell EMC SCG Policy Manager versions 5.10 through 5.12 Description: The issue is related to the use of a hard-coded cryptographic key in the Policy Manager software of Dell Secure Connect Gateway SCG. An attacker with knowledge of the...

CVE-2022-39889

Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information...

rf4.info Cross Site Scripting vulnerability OBB-3046181

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mir09.info Cross Site Scripting vulnerability OBB-3046092

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-41097

Technical details about CVE-2022-41097 (NPS RADIUS information disclosure) are not provided in the supplied documents. Monitor for updates from official sources for affected products, versions, and fixes.

info-protect.pl Cross Site Scripting vulnerability OBB-3044292

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...