CVE-2020-22608: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php...

PT-2021-10772

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.12.6 Description The issue is related to a Cross Site Scripting XSS vulnerability. It affects the queue-name parameter in the include/class.queue.php file. There is no information provided about the estimated numbe...

Enhancesoft osTicket cross-site scripting vulnerability

osTicket is a widely used and trusted open source work order support ticket system. A cross-site scripting vulnerability exists in osTicket versions prior to 1.12.6. An attacker can exploit this vulnerability via the queue-name parameter in include/ajax.search.php...

Enhancesoft osTicket cross-site scripting vulnerability

osTicket is a widely used and trusted open source work order support ticket system. A cross-site scripting vulnerability exists in osTicket versions prior to 1.12.6. An attacker can exploit this vulnerability via the queue-name parameter in include/class.queue.php...

PT-2021-10771

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.12.6 Description The issue is related to a Cross Site Scripting vulnerability. It can be exploited via the queue-name parameter to the "/include/ajax.search.php" API endpoint. Recommendations For versions prior to...

PT-2021-13182

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: A memory corruption issue exists due to a use after free in the wpas ctrl msg queue timeout function of ctrl iface unix.c. This could lead to local escalation of privilege, requiring System execution...

PT-2024-11240 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a Use-after-Free problem in the Linux kernel, specifically in the can: j1939 module. The problem occurs when a skb is taken from the per-session skb queue witho...

UBUNTU-CVE-2021-22116

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugi...

Exim parse_fix_frase() Buffer Overflow Privilege Escalation

The vulnerability of the parsefixphrase function in the Exim message forwarding agent is caused by an overflow in the buffer in the “queue”. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...

Work Provider Site Level Administration Disclosure Data

The vulnerability of the Work Provider Site Level Administration component of the application for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker...

Moderate: Red Hat Security Advisory: RHV Manager security update (ovirt-engine) [ovirt-4.4.6]

Updated ovirt-engine packages that fix several bugs , security flaws and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

UVI-2021-1000030 dmaengine: idxd: fix wq size store permission state

dmaengine: idxd: fix wq size store permission state This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.32 by commit...

UVI-2021-1000064 sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues

sfc: adjust efx-xdptxqueuecount with the real number of initialized queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000139 sfc: farch: fix TX queue lookup in TX flush done handling

sfc: farch: fix TX queue lookup in TX flush done handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

UVI-2021-1000024 dmaengine: idxd: fix wq size store permission state

dmaengine: idxd: fix wq size store permission state This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

GSD-2021-1000065 sfc: farch: fix TX queue lookup in TX flush done handling

sfc: farch: fix TX queue lookup in TX flush done handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

GSD-2021-1000024 dmaengine: idxd: fix wq size store permission state

dmaengine: idxd: fix wq size store permission state This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

UVI-2021-1000065 sfc: farch: fix TX queue lookup in TX flush done handling

sfc: farch: fix TX queue lookup in TX flush done handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

GSD-2021-1000104 sfc: farch: fix TX queue lookup in TX flush done handling

sfc: farch: fix TX queue lookup in TX flush done handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

PT-2021-28571

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue concerns a fix for TX queue lookup in TX flush done handling. It was introduced in version v5.10 and fixed in Linux Kernel version v5.11.20. The actual impact and attack plausibilit...