GSD-2021-1001513 mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap

mac80211: limit injected vht mcs/nss in ieee80211parsetxradiotap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.285 by commit...

UVI-2021-1001497 ipack: ipoctal: fix stack information leak

ipack: ipoctal: fix stack information leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.286 by commit...

GSD-2021-1001497 ipack: ipoctal: fix stack information leak

ipack: ipoctal: fix stack information leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.286 by commit...

CVE-2021-26589

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

PT-2021-30059

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the sctp module in the Linux Kernel, where it fails to handle a NULL return from the skb header pointer function in sctp rcv ootb. This could potentially lead to...

PT-2021-30092

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description A potential issue exists in the Linux Kernel's sch taprio module, where a timer is not properly cancelled from the taprio destroy function. The actual impact and attack plausibility have not...

PT-2021-30183

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.14.9 Description A potential issue exists where the hns3 nic net open function can be called repeatedly. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2021-26212

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to the ASoC SOF component in the Linux Kernel. It may potentially lead to a security vulnerability, although the actual impact and attack plausibility have not been...

PT-2021-30225

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.14.8 Description A potential security issue has been identified, although its actual impact and attack plausibility have not yet been proven. The issue was introduced in version v5.13 and is fixed in...

PT-2021-30020

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description A potential security issue has been identified, which may aid in the discovery of security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-30169

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.11 Description The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26061

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description A potential security issue has been identified, which may aid in the discovery of security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-26169

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.12 Description: The issue is related to the ci hdrc imx driver in the Linux Kernel. It has been identified that the driver may be vulnerable due to the way it handles certain parameters. The actual impact...

PT-2021-30174

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description A potential security issue is identified in the Linux Kernel, specifically in the aesni - xts crypt function. The function returns if walk.nbytes is 0. The actual impact and attack plausibili...

PT-2021-26097

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description A potential issue exists in the Linux Kernel's sch taprio module, where a timer is not properly cancelled from the taprio destroy function. The actual impact and attack plausibility have not...

PT-2021-26174

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.11 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven...

openSUSE 15 Security Update : MozillaFirefox (openSUSE-SU-2021:1367-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1367-1 advisory. - Uninitialized memory in a canvas object could have caused an incorrect free leading to memory corruption and a potentially exploitable...

QuickAccManager.sol Potential replay attack

Handle WatchPug Vulnerability details This issue is possibly duplicate with a previous issue named "Potential replay attack" In QuickAccManager.solsendTxns and QuickAccManager.solsendTransfer, addressidentity is not included in the txHash, makes it possible to replay the transaction on another...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-SLE / MozillaFirefox-devel / etc (SUSE-SU-2021:3451-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3451-1 advisory. This update contains the Firefox Extended Support Release 91.2.0 ESR. Release 91.2.0 ESR: Fixed: Various stability, functionality, and...

Cross-site Scripting (XSS) - Stored in leantime/leantime

Description Multiple Stored XSS on featuers 'Milestones' , 'Research', 'Retrospective' at Leantime 2.1.8 Proof of Concept // PoC.req POST /leantime/public/tickets/editMilestone/ HTTP/1.1 Host: 127.0.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:94.0 Gecko/20100101 Firefox/94.0...