CVE-2020-22346

IBM Spectrum Protect Operations Center (versions 8.1.0.000–8.1.13.x) is vulnerable to CVEs CVE-2022-22348 (reverse tabnabbing) and CVE-2022-22346 (CSRF). Affected versions may allow an attacker to cause tabnabbing or unauthorized actions via CSRF. Remediation: upgrade to 8.1.14. CVSS bases: 4 and...

CVE-2022-35550

The IBM Security Bulletin for CVE-2022-35550 (linked to CVE-2021-35550 in the bulletin) indicates an information-leak vulnerability in IBM Cloud Pak for Multicloud Management Monitoring where Java SE JSSE usage by multiple components could allow an unauthenticated attacker to obtain sensitive inf...

PT-2025-26026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when a task is descheduling and is requeued on a CPU that is excluded from the cpus mask. This can trigger a...

Denial Of Service(DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

When connected to Windows welcome/lock screen, the keyboard layout will revert to the system default

When presented with welcome/lock screen of Windows, the keyboard layout will revert to the system default layout of VDA on windows station. This is particularly problematic when changing passwords...

CVE-2019-14435

According to connected Veracode data, the vulnerability affects rancher/rancher and is categorized as Information Disclosure caused by missing or improper Content-Security-Policy header values. The server response can leak confidential information, including Cookie values. There is no version or ...

CVE-2019-14436

Summary: The connected Veracode record indicates a privilege escalation vulnerability in github.com/rancher/rancher caused by improperly enforced API group rules. A project owner with permissions to edit role bindings can allocate a cluster-level role to themselves or others, effectively granting...

CVE-2019-17591

Bolt CMS 3.x contains a CSRF vulnerability (CVE-2019-17591) demonstrated by public exploits targeting Bolt CMS 3.6.10. The exploit describes an authenticated user CSRF payload that posts to /index.php/async/folder/create to perform actions on behalf of the user. Connected sources show CSRF risk i...

CVE-2019-9887

The connected VERACODE entry describes a Cross-site Scripting (XSS) issue in the johnpbloch/wordpress package, caused by a flawed sanitization path where wp_filter_post_kses is used instead of wp_filter_kses. This allows HTML tags to pass through and be interpreted by the browser. The document do...

CVE-2019-14803

CVE-2019-14803 is connected to a privilege-escalation issue in HashiCorp Nomad via the exec driver, caused by improper setuid permissions. The Veracode entry confirms Nomad as affected and notes the root cause as the exec driver having improper setuid permissions. No exploit/vector details are pr...

CVE-2019-14803

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2019-15928

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2020-17455

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

PT-2022-8901 · Unknown · Markdown-It-Toc

Name of the Vulnerable Software and Affected Versions: markdown-it-toc versions affected versions not specified Description: The issue affects the generation of the table of contents toc in markdown-it-toc, where the title of the generated toc and the contents of the header are not properly...

ICA session freezes 8-10 minutes after session launch

ICA session freezes 8-10 minutes after session launch. The session remains active, only the display is frozen, for example keyboard typing will continue through to session. Users can successfully reconnect to the session and work again for similar time before the session again appears frozen...

CVE-2022-20236

A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709...

Code injection

A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709...

CVE-2022-20236

CVE-2022-20236 is referenced in the Android Security Bulletin under Unisoc GPU; the affected component is a UNISOC GPU driver. The underlying root cause and specific impact are not detailed in the provided documents. The CVSS from NVD indicates HIGH impact with network attack vector and no user i...

PT-2025-25941

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the Linux kernel within the sound/soc/sof/intel/hda-ipc.c module. The issue occurs when the system processes an IPC reply message before receiving a ...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1999)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a loca...