261 matches found
pd-premium.com Cross Site Scripting vulnerability OBB-3223059
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-33242
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...
Authentication flaw
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...
CVE-2022-33242 Improper authentication in Qualcomm IPC
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...
CVE-2022-33242 Improper authentication in Qualcomm IPC
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...
Malicious code in lefko-pd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78aaf506f6e99d6e64b0e74f83617500cdcd072a44a88caedc29a1a847fbbd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4274 Malicious code in lefko-pd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78aaf506f6e99d6e64b0e74f83617500cdcd072a44a88caedc29a1a847fbbd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ALBA-2022:0347 resource-agents bug fix and enhancement update
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: gcp-vpc-move-vip, gcp-vpc-move-route, gcp-pd-move: A failed...
resource-agents bug fix and enhancement update
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: gcp-vpc-move-vip, gcp-vpc-move-route, gcp-pd-move: A failed...
resource-agents bug fix and enhancement update
An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...
GSD-2021-1002272 usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
usb: typec: tipd: Remove WARNON in tps6598xblockread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...
UVI-2021-1001744 blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...
UVI-2021-1001606 blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.150 by commit...
pd-admin.de Cross Site Scripting vulnerability OBB-2150669
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2021-1976
A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...
CVE-2021-1976
CVE-2021-1976 is a Qualcomm WLAN use-after-free vulnerability caused by improper validation of a P2P device address in PD Request frames. It affects Qualcomm/ Snapdragon WLAN components; exploited via network, with a CVSS v3.1 base score of 9.8 (CRITICAL). Public details reference Qualcomm’s Augu...
CVE-2021-1976
A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...
resource-agents security update
4.1.1-68 - azure-lb: fix redirect issue Resolves: rhbz1850778 4.1.1-67 - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz1846733 4.1.1-65 - azure-events: handle exceptions in urlopen Resolves: rhbz1845574 4.1.1-64 - nfsserver: fix NFSv4-only support - azure-events: new resource...
pd-hub.icpa.org Cross Site Scripting vulnerability OBB-1463689
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
servizionline.comune.noventa.pd.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1151774 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...