UBUNTU-CVE-2022-48726

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Protect mc during concurrent multicast leaves Partially revert the commit mentioned in the Fixes line to make sure that allocation and erasing multicast struct are locked. BUG: KASAN: use-after-free in...

CVE-2022-48726 RDMA/ucma: Protect mc during concurrent multicast leaves

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Protect mc during concurrent multicast leaves Partially revert the commit mentioned in the Fixes line to make sure that allocation and erasing multicast struct are locked. BUG: KASAN: use-after-free in...

CVE-2022-48726

CVE-2022-48726 affects the Linux kernel’s RDMA/ucma code path, specifically a use-after-free in ucma_cleanup_multicast and related flows (ucma_destroy_private_ctx, ucma_write) caused by touching a concurrently freed multicast structure during a multicast leaves operation. The description notes th...

Sql injection

An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low privileges, to send queries with malicious SQL code on the "/leaves/validate" path and the “id” parameter, managing to extract arbritary information from the...

Jorani SQL Injection Vulnerability

Jorani is a leave management system developed by Benjamin BALET, an individual developer in France. It is designed to provide small organizations with a simple workflow for leave and overtime requests. A SQL injection vulnerability exists in Jorani version 1.0.0 that originates from allowing an...

CVE-2023-34459 OpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific trees

OpenZeppelin Contracts is a library for smart contract development. Starting in version 4.7.0 and prior to version 4.9.2, when the verifyMultiProof, verifyMultiProofCalldata, procesprocessMultiProof, or processMultiProofCalldat functions are in use, it is possible to construct merkle trees that...

kernel: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level

An integer overflow exists in the linux kernel such that the value returned from acpifindlastcachelevel is then assigned to unsigned fwlevel, which will result in the number of cache leaves calculated incorrectly, resulting in damage to the confidentiality, integrity, and availability of the syst...

kernel: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level

An integer overflow exists in the linux kernel such that the value returned from acpifindlastcachelevel is then assigned to unsigned fwlevel, which will result in the number of cache leaves calculated incorrectly, resulting in damage to the confidentiality, integrity, and availability of the syst...

CVE-2023-0641

A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password...

CVE-2023-0641

A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password...

Design/Logic Flaw

A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password...

CVE-2023-0641

PHPGurukul's Employee Leaves Management System 1.0 contains a vulnerability in changepassword.php where manipulating newpassword/confirmpassword weakens password requirements. The issue is remotely exploitable with high impact on confidentiality/integrity (per CVSS). Connected documents corrobora...

CVE-2023-0641 PHPGurukul Employee Leaves Management System changepassword.php weak password

A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password...

PT-2023-16418 · Unknown · Phpgurukul Employee Leaves Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Leaves Management System version 1.0 Description: A vulnerability was found in the PHPGurukul Employee Leaves Management System, affecting an unknown functionality of the file changepassword.php. The manipulation of the...

Employee Leaves Management System 安全漏洞

Employee Leaves Management System ELMS is an internal employee management system for individual developers. A security vulnerability exists in PHPGurukul Employee Leaves Management System version 1.0, which is caused by an unknown function in the file changepassword.php, with a weak password in t...

CVE-2022-34132

Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at application/controllers/Leaves.php...

CVE-2022-34133

Jorani v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Comment parameter at application/controllers/Leaves.php...

Jorani SQL注入漏洞

Jorani is a leave management system developed by Benjamin BALET, an individual developer in France. Designed to provide small organizations with a simple workflow for leave and overtime requests. Jorani v1.0 suffers from an SQL injection vulnerability that stems from a lack of valid validation in...

PT-2022-22017 · Benjamin Balet · Jorani

Name of the Vulnerable Software and Affected Versions: Benjamin BALET Jorani version 1.0 Description: The issue is a SQL injection vulnerability that can be exploited via the id parameter at the application/controllers/Leaves.php endpoint. This vulnerability allows for potential unauthorized acce...

Jorani 跨站脚本漏洞

Benjamin BALET Jorani is a leave management system from the French personal developer Benjamin BALET. Designed to provide small organizations with a simple workflow for leave and overtime requests, Benjamin BALET Jorani version 1.0 contains a cross-site scripting vulnerability stemming from a lac...