5599 matches found
PT-2022-32536
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.18.7 Description A potential security issue exists due to a request sock leak in sk lookup helpers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-32896
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.10.126 Description A potential security issue exists due to a request sock leak in sk lookup helpers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-33009
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.202 Description A potential security issue exists due to a request sock leak in sk lookup helpers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-32737
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.15.50 Description A potential security issue exists due to a request sock leak in sk lookup helpers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
OESA-2022-1787 qt5-qtbase security update
Qt is a software toolkit for developing applications. Security Fixes: In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.CVE-2022-25255...
python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments
A flaw was found in Django. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value...
PT-2022-37132
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including fp cmp mag, crtmgr trust list lookup, and...
ghostscript:gs_device_ps2write_fuzzer: Crash in names_string_ref
Detailed Report: https://oss-fuzz.com/testcase?key=6581616931110912 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001000 Crash State: namesstringref...
OSV-2022-595 Stack-buffer-overflow in Lookup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49227 Crash type: Stack-buffer-overflow WRITE Crash state: Lookup LookupLetter TranslateLetter...
PT-2022-37099
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided input. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions Lookup, LookupLetter, and TranslateLetter. No...
espeak-ng:ssml-fuzzer: Stack-buffer-overflow in Lookup
Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6069118884773888 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...
CVE-2022-25800
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25800
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25800
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25800
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25800
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
CVE-2022-25800: Server-Side Request Forgery (SSRF)
Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...
Best Practical RT for Incident Response 代码问题漏洞
Best Practical RT for Incident Response is an extension of Best Practical's RT. It provides pre-configured queues and workflows designed for incident response teams. A security vulnerability exists in Best Practical RT for Incident Response RTIR, which stems from the fact that it allows an attack...
PT-2022-17527
Name of the Vulnerable Software and Affected Versions Best Practical RT for Incident Response RTIR versions 4.0.3 and earlier, 5.x versions prior to 5.0.3 Description The issue allows for Server-Side Request Forgery SSRF via the whois lookup tool. Recommendations For versions prior to 4.0.3, upda...
CVE-2022-33980
Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the...