kernel: dma-buf/dma-resv: Stop leaking on krealloc() failure

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: Stop leaking on krealloc failure Currently dmaresvgetfences will leak the previously allocated array if the fence iteration got restarted and the kreallocarray fails. Free the old array by hand, and make sure we...

kernel: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may not be present then...

PT-2022-7576

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0804 Description The issue is related to incorrect numerical computations when handling floating-point values in the num divide function of the Vim text editor. This can allow an attacker to access confidential data a...

PT-2022-23125

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue arises when the QuantizeAndDequantizeV3 function is given a nonscalar n...

PT-2022-37133

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash involves the mrb bint cmp function, which is part of a comparison...

PT-2022-37109

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving mrb bint cmp, cmpnum, and num gt. No informati...

PT-2022-37079

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as mrb bint cmp, cmpnum, and num gt. No information is...

GSD-2022-1002874 exfat: check if cluster num is valid

exfat: check if cluster num is valid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit 2193286402df2d9c53294f7a858d5e6fd7346e08,...

Malicious code in non-string-num (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c430d1d68111014594a9adefc76a74cc7f5cb9052db663c69fd1df535d8bd61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29204

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.rawops.UnsortedSegmentJoin does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack. T...

CVE-2022-29432: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters...

PT-2022-19606

Name of the Vulnerable Software and Affected Versions wpDataTables plugin versions = 2.1.27 Description The issue concerns Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited via the &data-link-text, &data-link-url, &data,...

QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

DEBIAN-CVE-2021-3748

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

CVE-2021-46709

phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter aka num or number...

CVE-2021-46709

CVE-2021-46709 affects phpLiteAdmin up to version 1.9.8.2, where the index.php newRows parameter (also known as num or number) allows cross-site scripting (XSS). The issue stems from insufficient input validation/output handling for this parameter. Impact is XSS on affected installations; no expl...

CVE-2021-46709

phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter aka num or number...

PT-2022-13033

Name of the Vulnerable Software and Affected Versions Themify Portfolio Post WordPress plugin versions prior to 1.1.7 Description The issue arises from the lack of sanitization and escaping of the num of pages parameter in the response of the "themify create popup page pagination" AJAX action. Th...

PT-2021-30623

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue is related to the connector bad edid function in the Linux Kernel, where the num of ext is not properly capped by num blocks during a read operation. This is an automated identificatio...

PT-2021-26628

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to the connector bad edid function in the Linux Kernel, where the num of ext is capped by num blocks read. This could potentially lead to a security vulnerability, althoug...