6775 matches found
PT-2022-25380 · Pypi · Democritus-Networking +1
Name of the Vulnerable Software and Affected Versions: d8s-pdfs version 0.1.0 Description: The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...
PT-2022-25547 · Pypi · D8S-Dates +1
Name of the Vulnerable Software and Affected Versions: d8s-dates version 0.1.0 Description: The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. Recommendations: For version...
PT-2022-25189 · Tenda · Tenda Ac21
Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow vulnerability. It can be exploited via the /bin/httpd endpoint, specifically through the form fast setting wifi set parameter. Recommendations: For Tenda AC...
PT-2022-25188 · Tenda · Tenda Ac21
Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow vulnerability via the /bin/httpd endpoint, specifically affecting the setSchedWifi function. Recommendations: For Tenda AC21 version 16.03.08.15, as a...
PT-2022-25187 · Tenda · Tenda Ac21
Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow vulnerability via the /bin/httpd endpoint, specifically affecting the saveParentControlInfo function. Recommendations: For Tenda AC21 version 16.03.08.15,...
PT-2022-22541 · Otfcc +1 · Otfcc +1
Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow was discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6c0a32 endpoint. Recommendations: For OTFCC commit 617837b, as a temporary workaround, consider restricting acces...
PT-2022-23872 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection. It is mentioned that certain interfaces in JFinal CMS do not utilize the same component or filters but instead use their own SQL concatenation methods, which results...
PT-2022-34110 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.12 through 5.10.136 Description: A memory leak issue was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.12 through 5.10.136, update to versi...
PT-2022-34171 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns the md-raid component, where the bitmap is not properly destroyed after the thread is destroyed. This is an automated ID intended to aid in discovery of potential securi...
PT-2022-34285 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to the netdevsim component, which can trigger allocation warnings from user space. The actual impact and attack plausibility have not yet been proven. Recommendations:...
PT-2022-34172 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A potential security issue exists due to a use-after-free error in the linkwatch on disconnect. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...
PT-2022-33793 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.33 through v5.15.62 Description: The issue concerns the KVM module in the Linux Kernel, where a reference to the /dev/kvm module is unconditionally obtained when creating a VM. The actual impact and attack...
PT-2022-34082 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It involves checking the size of the screen before performing a memset io operation. The actual impact and attack...
PT-2022-34079 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns a stack-out-of-bound access in SPMI tracing functions. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.3 and fixed in...
PT-2022-33875 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to the netdevsim component, which can trigger allocation warnings from user space. The actual impact and attack plausibility have not yet been proven. Recommendations:...
PT-2022-34111 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a refcount leak in the esdhc signal voltage switch function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-34040 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: A refcount leak bug was discovered in the ohci-ppc-of module of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-33904 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.15.60 Description: The issue is related to the simplification of devm spi register controller in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2022-33759 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to potential memory leaks in the rpc sysfs xprt state change function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
