PT-2022-35115 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the creation of new Tx rings via ethtool, where tx tstamps are not set. This is an automated ID intended to aid in discovery of potential security vulnerabilities, wit...

PT-2022-35568 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns a fix for a sanity check on destination blkaddr during recovery in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-35631 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue concerns a rate rounding problem in the zynqmp pll round rate function of the Linux Kernel, specifically affecting the zynqmp pll. The actual impact and potential for attack have...

CVE-2022-39385 Users erroneously and transparently added to private messages in Discourse

Discourse is the an open source discussion platform. In some rare cases users redeeming an invitation can be added as a participant to several private message topics that they should not be added to. They are not notified of this, it happens transparently in the background. This issue has been...

PT-2022-35191 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.1 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It was introduced in version v2.6.21 and fixed in version v6.0.1. The actual impact and attack plausibility hav...

PT-2022-35171 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the handling of real but unexpected device interrupts in the i2c designware component. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-35026 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns an uninit memory read in the ath9k htc rx msg function. This problem is related to the wifi ath9k driver. The actual impact and attack plausibility have not yet been proven...

PT-2022-35604 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.223 Description: The issue concerns error handling in the netsec register mdio function. It was introduced in version v4.16 and fixed in version v5.4.223. The actual impact and attack plausibility have not...

PT-2022-35184 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: The issue concerns the nilfs2 file system in the Linux Kernel, where checkpoint acquisition failure is not properly handled, potentially leading to security vulnerabilities. The actual impact...

PT-2022-35247 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically with the ahci module. The actual impact and attack plausibility have not yet been proven...

Integer overflow

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tifgetimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and m...

CVE-2022-3967 Vesta Control Panel sed main.sh argument injection

A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...

PT-2022-20918 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 8.0 through 9.2 LTS Description: The issue allows an authenticated and authorized user to cause a denial of service to the MQTT channels. Recommendations: For IBM MQ versions 8.0 through 9.2 LTS, update to a version that...

Closing an unexisting credit can overflow the credit count variable in the LineOfCredit contract

Lines of code Vulnerability details The LineOfCredit contract doesn't verify if a credit exists and is properly initialized when closing it, and will update its state anyway, leading to an inconsistent count. Impact The close function in the LineOfCredit contract doesn't check if the given credit...

PT-2022-26739 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /admin/fst upload.inc.php component. Recommendations: For AyaCMS version...

revenueContract that uses AccessControl instead of Ownable can’t work with SpigotLib's removeSpigot()

Lines of code Vulnerability details Proof of Concept The code in removeSpigot is the following bool success, = revenueContract.call abi.encodeWithSelector self.settingsrevenueContract.transferOwnerFunction, self.operator // assume function only takes one param that is new owner address ; So...

SpigotedLineLib::trade won’t work with tokens with approval race protection (USDT)

Lines of code Vulnerability details Proof of Concept Some tokens e.g. USDT, KNC do not allow approving an amount M 0 when an existing amount N 0 is already approved. This is to protect from an ERC20 attack vector described here. The problem is the code in trade is the following...

PT-2022-27106 · Espcms · Espcms

Name of the Vulnerable Software and Affected Versions: ESPCMS version P8.21120101 Description: A remote code execution issue was found in the IS GETCACHE component of the software, allowing for potential code execution from a remote location. Recommendations: For ESPCMS version P8.21120101,...

PT-2022-27286 · Prestashop · Eu Cookie Law Gdpr

Name of the Vulnerable Software and Affected Versions: EU Cookie Law GDPR Banner + Blocker module for PrestaShop version 2.1.3 and earlier Description: The issue allows SQL Injection via a cookie, specifically lgcookieslaw or lglaw. This can potentially lead to unauthorized access to sensitive...

PT-2022-17659 · Bmc · Bmc Remedy

Name of the Vulnerable Software and Affected Versions: BMC Remedy versions prior to 22.1 Description: An issue was discovered in BMC Remedy where Email-based Incident Forwarding allows remote authenticated users to inject HTML, such as an SSRF payload, into the Activity Log by placing it in the T...