PT-2022-28627

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.4.180 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28516

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.18 Description The issue is related to a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28457

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.95 Description The issue is related to a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28423

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.175 Description The issue is related to a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28396

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.227 Description The issue concerns a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

YOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of the settings available to users with a role as low as author before outputting them, leading to a Stored Cross-Site Scripting issue PoC As author, put the following payload in the Settings Integration Use Google reCaptcha Yes Site Key: v v 6.3.5 - "...

YOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of the settings available to users with a role as low as author before outputting them, leading to a Stored Cross-Site Scripting issue As author, put the following payload in the Settings Integration Use Google reCaptcha Yes Site Key: v v 6.3.5 - "...

org.jenkins-ci.main:jenkins-test-harness (1.581), org.jenkins-ci.main:jenkins-war (1.581) +5 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.581)

org.jenkins-ci.main:jenkins-core MAVEN version 1.581 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.581 - org.jenkins-ci.main:jenkins-war 1.581 -...

CVE-2022-21671

@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...

CVE-2022-21671

@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...

CVE-2022-21671: Exposure of Sensitive Information to an Unauthorized Actor

@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...

PT-2022-7358

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the psi trigger poll function in the kernel/sched/psi.c module of the Linux kernel's Pressure Stall Information PSI system. It involves the reuse of previously...

PT-2025-8377

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the data-race around ep-rdllist Description A data-race issue exists in the Linux kernel, specifically around ep-rdllist. The ep poll function calls ep events available witho...

Discourse < 2.7.11 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2021-43793

Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse...

Discourse security vulnerabilities

Discourse is an open source community discussion platform that includes community, email, and chat room features. The platform includes community, email, and chat room features.Discourse has a security vulnerability that stems from a lack of filtering in the Polls feature for single-option voting...

WordPress Survey And Poll SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation.WordPress Survey and Poll is a solution for direct feedback from visitors on the site. WordPress Survey And Poll SQL injection vulnerability can be exploited by attackers to gain access to...

CVE-2021-24834

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

CVE-2021-24833

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...

CVE-2021-24833

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...