PT-2022-34594 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue concerns an out-of-bounds read when setting HMAC data in the IPv6 segment routing SR functionality. The actual impact and attack plausibility have not yet been proven...

PT-2022-34647 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A race condition exists in the ALSA pcm oss module. The issue is related to the SNDCTL DSP SYNC control. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-34704 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.293 Description: The issue is related to an out of bounds access in the snd emu10k1 pcm channel alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-34698 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.258 Description: The issue is related to a use-after-free in the efi capsule write function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34617 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a hive reference leak when adding an xgmi device in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34607 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.8 Description: The issue is related to a bitbang fix for lsb-first Rx in the SPI driver. It was introduced in version v5.18 and fixed in version v5.19.9. The actual impact and attack plausibility have...

PT-2022-34598 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: A potential security issue exists in the netfilter nf tables component. The issue arises when the offload flags check fails, and the hook list is not properly cleaned up. This problem was...

Infinity loop can lead to denial of service

Lines of code Vulnerability details Impact Infinity loop can lead to denial of service Proof of Concept Tools Used None. Recommended Mitigation Steps Refactor code if is possible. --- The text was updated successfully, but these errors were encountered: All reactions...

PT-2022-7354 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A memory leak issue was found in the Linux Kernel, specifically in the damon sysfs add target function of the mm/damon/sysfs.c file, which is part of the Netfilter component. The...

PT-2022-28238 · Lithium +1 · Lithium +2

Name of the Vulnerable Software and Affected Versions: lithium with Swagger-UI enabled affected versions not specified Description: A XSS vulnerability in the provided Swagger-UI is exploitable in applications, allowing an attacker to gain Remote Code Execution RCE and potentially exfiltrate...

PT-2022-26092 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions through 1.6.0-639 Description: A NULL pointer dereference issue occurs in the AP4 File::ParseStream function, located in Core/Ap4File.cpp, which is called from AP4 File::AP4 File. Recommendations: For versions through 1.6.0-63...

PT-2022-21887 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD versions 2022 through 2023 Description: The issue arises when a maliciously crafted file, specifically X B, CATIA, or PDF, is parsed through the software, leading to an out-of-bounds write that can result in arbitrary code...

CVE-2022-3354 Open5GS UDP Packet ogs-tlv-msg.c denial of service

A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and ma...

PT-2022-21786 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions up to 2.4.10 Description: A vulnerability has been found in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler, which can lead to denial of service. The manipulation affects unknown code. The exploit has...

PT-2022-24847 · Unknown · Matrix Ios Sdk

Name of the Vulnerable Software and Affected Versions: matrix-ios-sdk versions prior to 0.23.19 Description: The issue allows an attacker cooperating with a malicious homeserver to construct messages that appear to have come from another person without indication. A sophisticated attacker could...

PT-2022-6493

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A vulnerability in the Linux Kernel has been classified as problematic. It affects an unknown function of the file mm/memory.c of the component Driver Handler, leading to use after free...

OESA-2022-1964 mod_security_crs security update

The base rules are provided for modsecurity by this package. Security Fixes: The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes. A vulnerable back-end...

Hitachi Energy AFS660/AFS665

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: AFS660/AFS665 Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to overflow an internal buffer...

Gobblers burnt for minting legendary Gobblers can be transferred out from the address zero

Lines of code Vulnerability details Impact The mintLegendaryGobbler function burn standard gobblers by setting their owner to address0 without deleting the getApprovedid. So the original owner can setApproval for himself address and transfer the gobbler token back to any address from the address0...

PT-2022-22164 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 106.0.5249.62 Description: The issue is related to insufficient data validation in the File System API, allowing a remote attacker to bypass File System restrictions via a crafted HTML page. The severity of thi...