CVE-2022-41229: Improper Neutralization of Input During Web Page Generation

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Security Bulletin: Rational Performance Tester contains a vulnerability which could affect Eclipse Jetty. Rational Performance Tester has taken steps to mitigate this vulnerability.

Summary Eclipse Jetty contains a vulnerability that may allow a remote attacker to exploit this vulnerability to consume CPU that remains high even without any traffic. Vulnerability Details IBM X-Force ID: 230016 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by an error...

nodejs-normalize-url: ReDoS for data URLs

A flaw was found in normalize-url. Node.js has a ReDoS regular expression denial of service issue because it has exponential performance for data...

GSD-2022-1005834 powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable

powerpc/perf: Optimize clearing the pending PMI and remove WARNON for PMI check in powerpmudisable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel versi...

PT-2022-33832 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue concerns an optimization in clearing the pending PMI and removal of a WARN ON for PMI check in power pmu disable. The actual impact and attack plausibility have not yet been prove...

OPENSUSE-SU-2022:10122-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Remove package virtualbox-guest-x11, which is no longer needed. - Fix screen resizing under Wayland boo1194126 and boo1194126 Version bump to 6.1.36 released by Oracle July 19 2022 This is a maintenance release. The following items were fix...

PT-2025-18481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which prevented bpf program recursion for raw tracepoint probes. The issue was caused by a bpf program attached to the contention...

Promiscous VLAN Tag Drops: Cause, Symptoms, and Solution

The counter nicerrvlanpromisctagdrops is incrementing. This may also cause performance issues and/or exceed the limits of a bandwidth license, triggering packet loss...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

More data flow occupies by PVS server after copy/paste vdisk in use on NAS storage

Since customer need to execute scheduled backup tasks and vdisk update tasks,administrator may copy vdisk, which is in-using for data streaming from PVS server. Sometimes, data flow to NAS storage will increase even vDisk copy operation is finished. As the result, end user will experience pool...

SUSE: Security Advisory (SUSE-SU-2022:1064-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: cloudcompare-2.11.3-4.fc37

CloudCompare is a 3D point cloud and triangular mesh processing software. It has been originally designed to perform comparison between two 3D points clouds such as the ones obtained with a laser scanner or between a point cloud and a triangular mesh. It relies on a specific octree structure that...

TikTok: Remotely Accessible Container Advisor exposed performance metrics and resource usage

A vulnerability was found that caused cAdvisor Container Advisor to be publicly accessible through an 8080 port. We thank @tw4v3sx for reporting this to our team...

SUSE: Security Advisory (SUSE-SU-2022:3225-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-28741

aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion LFI vulnerability that occurs due to missing input validation in v5.x...

CVE-2022-28741

aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion LFI vulnerability that occurs due to missing input validation in v5.x...

CVE-2022-28740

aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor...

CVE-2022-28740

aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor...

PT-2022-19202 · Unknown · Aenrich A+Hrd 5.X Learning Management Key Performance Indicator System

Name of the Vulnerable Software and Affected Versions: aEnrich a+HRD 5.x Learning Management Key Performance Indicator System version 5.x Description: The issue is related to a local file inclusion LFI vulnerability due to missing input validation. Recommendations: For version 5.x, update to a...

HP Performance Tune-up Code Execution

The vulnerability of the HP Performance Tune-up performance optimization tool, a software solution for automated support and driver updates by HP Support Assistant, lies in the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code...