PT-2022-31770

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns a sanity check on block address in the f2fs do zero range function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31274

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential deadlock issue was identified in the blk ia range sysfs show function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-31515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns a sanity check on block address in the f2fs do zero range function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32051

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to a range check for format count in the drm/plane component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-31885

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a range check for format count in the drm/plane component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

curl 安全漏洞

curl is a tool for transferring data from or to a server. A security vulnerability exists in curl versions 7.69.0 through 7.83.1, which stems from the fact that curl can accidentally inflate the permissions of a target file during a rename operation...

Zulip 安全漏洞

Zulip is a powerful open source group chat application from the Zulip team. Used to combine the immediacy of real-time chat with the productivity benefits of threaded conversations. A logic error vulnerability exists in Zulip versions 2.1.0 through 5.2, which originates when the server incorrectl...

CVE-2022-23056

In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack...

PT-2022-3088 · Jtekt · Jtekt Toyopuc Plcs

Name of the Vulnerable Software and Affected Versions: JTEKT TOYOPUC PLCs through 2022-04-29 Description: The issue is related to the mishandling of authentication in JTEKT TOYOPUC PLCs. They utilize the CMPLink/TCP protocol, which is configurable on ports 1024-65534 on either TCP or UDP, for...

ERPNext 安全漏洞

ERPNext is an open source enterprise resource planning solution from ERPNext India. A security vulnerability exists in ERPNext versions v11.0.0-beta through v13.0.2, which stems from vulnerability to lack of authorization in chat room functionality, and can be exploited by an attacker to send a...

PT-2022-15837 · Unknown · Openlibrary

Name of the Vulnerable Software and Affected Versions: openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 Description: The issue is related to Reflected XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

habitica 输入验证错误漏洞

habitica is an open-source habit-forming program open-sourced by HabitRPG USA. An input validation error vulnerability exists in habitica versions v4.119.0 through v4.232.2. An attacker exploits this vulnerability to open redirects via the login page...

Directus 代码问题漏洞

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A code issue vulnerability exists in Directus versions v9.0.0-beta.2 through 9.6.0, which stems from a server-side request forgery SSRF vulnerability in the media upload feature. An attacker could us...

Recipes 跨站脚本漏洞

Recipes are apps for managing recipes, planning meals, creating shopping lists, and more. A cross-site scripting vulnerability exists in Recipes versions 0.17.0 through 1.2.5, which stems from the vulnerability to stored cross-site scripting XSS in the "Name" field of the Keywords, Foods, and Uni...

Malicious code in dependency-with-range (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e27b581993c977a4ff51fbafd4bfe0947f0f11e6ad971af17b9dd93fa16da97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in range-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87e0eaef734e8f48ec3ef78b1404dcf4119124df9a8ac563e13abc11d267a03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in range-for-chrome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98b3f0dedf22447b136933cebd9260009981f8b304810b5920783f44d84dad0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5588 Malicious code in range-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87e0eaef734e8f48ec3ef78b1404dcf4119124df9a8ac563e13abc11d267a03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5589 Malicious code in range-for-chrome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98b3f0dedf22447b136933cebd9260009981f8b304810b5920783f44d84dad0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tiny-range-binarysearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1758f192df4854a2d7a5d26e16947cada8a23b6fad83735982f1207b13752357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...