CVE-2023-2863: Cleartext Storage in a File or on Disk

A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. It is possible to launc...

CVE-2023-2124

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure with a dirty log journal. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2023-2124

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure with a dirty log journal. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2023-2124: Out-of-bounds Write

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure with a dirty log journal. This flaw allows a local user to crash or potentially escalate their privileges on the system...

The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...

The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...

The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...

kernel: jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted

A flaw was found in the jbd2 module in the Linux kernel. An assertion failure can be triggered when a specific sequence of transactions and operations is performed due to incorrect synchronization, potentially resulting in a denial of service...

kernel: kernel: ext4 out-of-bounds read via corrupt file system image

A flaw was found in the ext4 file system within the Linux kernel. When mounting a specially crafted, corrupt file system image, a local attacker could trigger an out-of-bounds read in the ext4fcreplayscan function. This could lead to a system crash, resulting in a denial of service...

kernel: ext4: fix null-ptr-deref in ext4_write_info

In the Linux kernel, the following vulnerability has been resolved: ext4: fix null-ptr-deref in ext4writeinfo I caught a null-ptr-deref bug as follows: ================================================================== KASAN: null-ptr-deref in range 0x0000000000000068-0x000000000000006f CPU: 1 PI...

kernel: Linux kernel ext4: Information Disclosure via uninitialized memory leak in fast-commit journal

A flaw was found in the Linux kernel. A local attacker could exploit an information disclosure vulnerability by not properly zeroing out unused space at the end of fast-commit journal blocks in the ext4 filesystem. This could lead to the leakage of uninitialized memory to disk, potentially allowi...

PT-2025-40121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to ext4 filesystem handling. A commit extended the transaction scope in ext4 unlink too far, including a call to ext4 find entry. This...

bronxjournal.com Cross Site Scripting vulnerability OBB-3304261

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

arizonajournal.org Cross Site Scripting vulnerability OBB-3296574

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-44461

Cross-site scripting XSS issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim...

CVE-2021-44461

Cross-site scripting XSS issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim...

PT-2023-12546 · Odoo · Odoo Enterprise

Name of the Vulnerable Software and Affected Versions: Odoo Enterprise versions 13.0 through 15.0 Description: The issue is a cross-site scripting XSS problem in the Accounting app, allowing remote attackers who can control the contents of accounting journal entries to inject arbitrary web script...

CVE-2021-44461: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim...

CVE-2023-21908

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Trn Journal Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acces...

CVE-2023-21907

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Trn Journal Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acces...