CVE-2022-29900

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions...

CVE-2022-29900

CVE-2022-29900 describes mis-trained branch predictions for return instructions that may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions. Connected advisories confirm this affects Linux-kernel components (e.g., linux-5.10 in Astra Linux; multiple Am...

GHSA-MC6J-H948-V2P6 RubyGems Improper Verification of Cryptographic Signature vulnerability

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, and Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contain an Improper Verification of Cryptographic Signature vulnerability in package.rb. This can resu...

RubyGems Improper Verification of Cryptographic Signature vulnerability

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, and Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contain an Improper Verification of Cryptographic Signature vulnerability in package.rb. This can resu...

Hotel Management System SQL Injection Vulnerability

Hotel Management System is a MIS project based on a hotel management system. v1.0 of Hotel Management System is vulnerable to SQL injection, which stems from a login page whose username parameter was found to contain SQL injection. An attacker could exploit the vulnerability to perform SQL...

Shopify: Staff without Manage Themes permissions can update themes

Vulnerability description not provided...

MariaDB my_wildcmp_8bit_impl component memory mis-reference vulnerability

MariaDB is a free and open source database management system from the MariaDB Foundation and a branch version of MySQL that uses the Maria storage engine. a memory misquote vulnerability exists in MariaDB v10.6.3 and lower, which originates in the /strings/ctype-simple.c component my...

MariaDB my_mb_wc_latin1 component memory misreference vulnerability

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A memory misreference vulnerability exists in the MariaDB mymbwclatin1 component, no details of the vulnerability are provided at this time...

MariaDB Binary_string::free_buffer() component memory misreference vulnerability

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A memory misreference vulnerability exists in MariaDB v10.6.3 and lower, which stems from a post-release reuse error in the component...

Google Chrome Cast UI memory error reference vulnerability

Google Chrome is a web browser from Google, Inc. A memory mis-reference vulnerability exists in the Google Chrome Cast UI, which is caused by a mix-up in the program's instructions for freeing memory, and can be exploited to cause the program to crash and execute arbitrary code...

Google Chrome Browser Switcher memory error reference vulnerability

Google Chrome is a web browser from Google, Inc. A memory mis-reference vulnerability exists in Google Chrome Browser Switcher, which is caused by a confusion in the program's instructions for releasing memory, and can be exploited to cause the program to crash and execute arbitrary code...

[WP-H5] RewardDistributor.setBribeVault() can cause users who haven't claimed their native tokens yet can not claim the reward anymore

Lines of code Vulnerability details In the current implementation, RewardDistributor.claim is using if token != bribeVault token is from rewardsrewardIdentifier.token to detect whether it's a ERC20 token or native token ETH. However, this is not a trustworthy way to determine whether the reward i...

Let’s Encrypt to revoke “mis-issued” certificates

If you use a Let’s Encrypt SSL/TLS certificate, you may wish to check your account over the coming days. Revocation is coming, and you’ve only got until tomorrow to figure things out. What’s the deal with free certificates? If you’re running a website, you want to make sure that it’s HTTPs. It...

MartDevelopers Order Processing Mis 跨站脚本漏洞

MartDevelopers Order Processing Mis is a lightweight order processing Mis prototype from MartDevelopers Kenya. A cross-site scripting vulnerability exists in MartDevelopers Order Processing Mis version 1.0, which can be exploited by an attacker to execute malicious HTML code via a registration fo...

Order Processing MIS 跨站脚本漏洞

Order Processing MIS is iOrder's lightweight prototype for an order processing MIS. Order Processing MIS suffers from a cross-site scripting vulnerability that stems from the software's lack of filtering and escaping of user-submitted data. This vulnerability can be exploited by remote attackers ...

Vim memory mis-reference vulnerability

Vim is a UNIX-based editor. vim is vulnerable to a memory mis-reference vulnerability in the exopen function in src/exdocmd.c, which could be exploited to cause a denial of service or code execution...

Bentley Systems Bentley View 资源管理错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View is vulnerable to a memory mis-reference vulnerability that stems from a boundary error when handling JT files. An attacker could exploit the vulnerability to create a specially crafted JT file and trick a victim into opening th...

Sifchain: Flaws In Social media Icon on error page which can lead to financial loss to a company.

Here, i found an issue on sifchain.finance that will direct impact to the customer of sifchain company which can be great loss in business as well as there will be problem regarding to communication with the genuine customer of a company. I know that sifchain.finance is not in scope but i saw thi...

GHSA-GG2G-M5WC-VCCQ Rebuild-bot workflow may allow unauthorised repository modifications

Impact projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project...

Rebuild-bot workflow may allow unauthorised repository modifications

Impact projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project...