DEBIAN-CVE-2022-34674

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak...

XStream can cause Denial of Service via stack overflow

Impact The vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream. Patches XStream 1.4.20 handles the stack overflow and raises an InputManipulationException instead...

PT-2022-6926

Name of the Vulnerable Software and Affected Versions XStream versions prior to 1.4.20 Description The issue allows a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service via manipulation of the processed input stream. This is achieved by...

PT-2025-37626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the pxa2xx-flash probe function within the mtd maps module of the Linux kernel. The issue occurs when a remapping error happens, failing to free the 'info...

PT-2022-38016

Уязвимость функции pxa2xx flash probe модуля drivers/mtd/maps/pxa2xx-flash.c драйвера доступа к устройствам памяти MTD ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2022-4021

The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.20.1. This is due to missing or incorrect nonce validation on the extraactions function. This makes it possible for unauthenticated attackers to change plugin settings...

PT-2022-34924 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to a potential null-deref in /proc/pid/smaps rollup. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

kernel: ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t

A vulnerability was found in the Linux kernel's CS35L41 driver. The constant CS35L41NUMOTPELEM is defined as 100 but is used by the arrays otpmap1 and otpmap2, which are both expected to contain only 99 elements. This mismatch causes the code to access memory past the array boundaries when...

Stored Cross Site Scripting (Network Maps Editor functionality)

Description Hello Team, Hope you are doing well. I have found a stored cross-site scripting vulnerability in the network maps edit functionality. What is stored cross site scripting attack? Stored XSS, occurs when user supplied input is stored and then rendered within a web page. Typical entry...

CVE-2022-25666

Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

PT-2022-5375 · Apache +2 · Apache Tomcat +2

Name of the Vulnerable Software and Affected Versions: Apache Tomcat affected versions not specified Pandora FMS version 7.65 Description: The issue concerns errors in synchronization when using a shared resource in Apache Tomcat, potentially allowing a remote attacker to gain unauthorized access...

GSD-2022-1006151 mtd: maps: Fix refcount leak in of_flash_probe_versatile

mtd: maps: Fix refcount leak in offlashprobeversatile This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006026 mtd: maps: Fix refcount leak in of_flash_probe_versatile

mtd: maps: Fix refcount leak in offlashprobeversatile This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1006025 mtd: maps: Fix refcount leak in ap_flash_init

mtd: maps: Fix refcount leak in apflashinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005865 mtd: maps: Fix refcount leak in ap_flash_init

mtd: maps: Fix refcount leak in apflashinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005616 mtd: maps: Fix refcount leak in of_flash_probe_versatile

mtd: maps: Fix refcount leak in offlashprobeversatile This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

About the security content of iOS 15.7 and iPadOS 15.7

About the security content of iOS 15.7 and iPadOS 15.7 This document describes the security content of iOS 15.7 and iPadOS 15.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

PT-2022-16424 · Red Hat · Openshift Container Platform

Name of the Vulnerable Software and Affected Versions: OpenShift Container Platform affected versions not specified Description: A credentials leak was found in the OpenShift Container Platform, where the private key for the external cluster certificate was stored incorrectly in the...

app.electricitymaps.com Cross Site Scripting vulnerability OBB-2879872

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-40724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where an error from htab lock bucket is not properly propagated to userspace. Specifically, in the htab map lookup and delete batch function, if htab...