332 matches found
GSD-2022-1006494 gpio: mockup: Fix potential resource leakage when register a chip
gpio: mockup: Fix potential resource leakage when register a chip This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006486 ice: Don't double unplug aux on peer initiated reset
ice: Don't double unplug aux on peer initiated reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006443 ieee802154: cc2520: add rc code in cc2520_tx()
ieee802154: cc2520: add rc code in cc2520tx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.294 by commit...
Security Bulletin: The embedded help system in IBM InfoSphere Streams contains a potential vulnerability (CVE-2013-0599)
Abstract The embedded help system in IBM InfoSphere Streams has a potential vulnerability where sensitive information about the help system’s implementation is disclosed. Content VULNERABILITY DETAILS: CVE ID:CVE-2013-059 9 CVSS: CVSS Base Score: 5.0 CVSS Temporal Score: See...
PT-2022-16006 · Nepxion · Nepxion Discovery
Name of the Vulnerable Software and Affected Versions: Nepxion Discovery affected versions not specified Description: The issue is related to a potential Server-Side Request Forgery SSRF in Nepxion Discovery, a solution for Spring Cloud. Specifically, the RouterResourceImpl uses RestTemplate's...
GSD-2022-1006044 bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()
bus: hisilpc: fix missing platformdeviceput in hisilpcacpiprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...
GSD-2022-1005928 fbdev: fb_pm2fb: Avoid potential divide by zero error
fbdev: fbpm2fb: Avoid potential divide by zero error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005823 video: fbdev: s3fb: Check the size of screen before memset_io()
video: fbdev: s3fb: Check the size of screen before memsetio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005744 net: Fix data-races around sysctl_devconf_inherit_init_net.
net: Fix data-races around sysctldevconfinheritinitnet. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...
GSD-2022-1005503 net: fix potential refcount leak in ndisc_router_discovery()
net: fix potential refcount leak in ndiscrouterdiscovery This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...
GSD-2022-1005414 fbdev: fb_pm2fb: Avoid potential divide by zero error
fbdev: fbpm2fb: Avoid potential divide by zero error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...
GSD-2022-1005310 spi: Fix simplification of devm_spi_register_controller
spi: Fix simplification of devmspiregistercontroller This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
PT-2022-33352 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue concerns a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...
PYSEC-2022-266
Poetry is a dependency manager for Python. When handling dependencies that come from a Git repository instead of a registry, Poetry uses various commands, such as git clone. These commands are constructed using user input e.g. the repository URL. When building the commands, Poetry correctly avoid...
CVE-2020-35525
In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing...
CVE-2020-35525
In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing...
CVE-2022-36010 Arbitrary code execution via function parsing in react-editable-json-tree
This library allows strings to be parsed as functions and stored as a specialized component, JsonFunctionValue. To do this, Javascript's eval function is used to execute strings that begin with "function" as Javascript. This unfortunately could allow arbitrary code to be executed if it exists as ...
Intel 2022.2 IPU BIOS Security Updates
Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified...
Intel® IPP Cryptography Advisory
Summary: A potential security vulnerability in an Intel® Integrated Performance Primitives IPP Cryptography software library may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26083 Description:...
