CVE-2022-2209

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

Apple Debuts Lockdown Mode to Prevent State-Sponsored Spying

By Deeba Ahmed Apple has announced adding a new feature to iOS devices dubbed the Lockdown Mode. This feature aims to… This is a post from HackRead.com Read the original post: Apple Debuts Lockdown Mode to Prevent State-Sponsored Spying...

CVE-2022-2282

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

GSD-2022-1004084 NFC: NULL out the dev->rfkill to prevent UAF

NFC: NULL out the dev-rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

CVE-2022-2246

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

GSD-2022-1003837 rtl818x: Prevent using not initialized queues

rtl818x: Prevent using not initialized queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003179 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak

KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...

GSD-2022-1002784 media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko

media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002668 staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()

staging: r8188eu: prevent -Ssid overflow in rtwwxsetscan This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

metricser.com Cross Site Scripting vulnerability OBB-2671117

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in safari-prevent-zoom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fa52994195922025f3f3c53b04c6590b0413d0d7ceda543abe5b6e24fe2c903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5904 Malicious code in safari-prevent-zoom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fa52994195922025f3f3c53b04c6590b0413d0d7ceda543abe5b6e24fe2c903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

var2.astro.cz Cross Site Scripting vulnerability OBB-2623510

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Xxe

Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

landbigfish.com Cross Site Scripting vulnerability OBB-2616050

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

expat security update

2.0.1-13.0.1 - Prevent integer overflow in storeRawNames CVE-2022-25315Orabug: 34059442 - Add missing validation of encoding CVE-2022-25235Orabug: 34059442 - Protect against malicious namespace declarations CVE-2022-25236Orabug: 34059442...

CVE-2022-1214

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

GSD-2022-1002510 NFSD: prevent underflow in nfssvc_decode_writeargs()

NFSD: prevent underflow in nfssvcdecodewriteargs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002375 NFSD: prevent underflow in nfssvc_decode_writeargs()

NFSD: prevent underflow in nfssvcdecodewriteargs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...

GSD-2022-1002296 nfc: nci: add flush_workqueue to prevent uaf

nfc: nci: add flushworkqueue to prevent uaf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.239 by commit...