USN-5368-1 linux-azure-5.13, linux-oracle-5.13 vulnerabilities

It was discovered that the BPF verifier in the Linux kernel did not properly restrict pointer types in certain situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-23222 It was discovered that the network traffic contro...

USN-5337-1 linux, linux-aws, linux-aws-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-kvm, linux-oracle, linux-raspi vulnerabilities

It was discovered that the BPF verifier in the Linux kernel did not properly restrict pointer types in certain situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-23222 Yiqi Sun and Kevin Wang discovered that the cgrou...

Governance Voting Dis-proportionally Favours Users Who Stake And Vote After A Poll Has Been Created And Had Its Snapshot Taken

Lines of code Vulnerability details Impact Polls are created by targeting the receivecw20 function which is queried whenever the contract receives tokens. By setting the hook message to Cw20HookMsg::CreatePoll, the sender is able to create a poll, assuming the amount sent satisfies the minimum...

WordPress YOP Poll Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress YOP Poll Plugin versions prior to 6.3.5, which stems...

CVE-2022-0205

The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings available to users with a role as low as author before outputting them, leading to a Stored Cross-Site Scripting issue...

CVE-2022-0205

The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings available to users with a role as low as author before outputting them, leading to a Stored Cross-Site Scripting issue...

CVE-2022-0205

The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings available to users with a role as low as author before outputting them, leading to a Stored Cross-Site Scripting issue...

CVE-2022-0205 YOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting

The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings available to users with a role as low as author before outputting them, leading to a Stored Cross-Site Scripting issue...

CVE-2022-0205

The CVE-2022-0205 issue affects the YOP Poll WordPress plugin prior to version 6.3.5. The vulnerability arises from insufficient sanitization/escaping of certain settings that are output to pages and are accessible to users with as low as the author role, resulting in Stored Cross-Site Scripting....

CVE-2022-0205: Improper Neutralization of Input During Web Page Generation

The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings available to users with a role as low as author before outputting them, leading to a Stored Cross-Site Scripting issue...

PT-2022-13035

Name of the Vulnerable Software and Affected Versions YOP Poll WordPress plugin versions prior to 6.3.5 Description The issue is related to a Stored Cross-Site Scripting problem. It occurs because some settings are not properly sanitised and escaped before being outputted, which can be accessed b...

WordPress’ YOP Poll plugin has a cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress YOP Poll Plugin versions prior to 6.3.5, which stems...

ASB-A-185125206

In aiopollcompletework of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2022-28603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.231 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-28872

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.4 Description The issue concerns a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28826

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-28740

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description A data-race issue exists in the dropmon net event and trace napi poll hit functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28586

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.14.267 Description A data-race issue exists in the dropmon net event and trace napi poll hit functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.10.101 Description A data-race issue exists in the dropmon net event and trace napi poll hit functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28568

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.303 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...