GSD-2022-1004995 ieee802154/adf7242: defer destroy_workqueue call

ieee802154/adf7242: defer destroyworkqueue call This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

GSD-2022-1004989 drm/i915/ttm: fix CCS handling

drm/i915/ttm: fix CCS handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit 97434cb55bd884bd268626ec41489f79b261b2d4, it wa...

GSD-2022-1004981 tcp: annotate data-race around challenge_timestamp

tcp: annotate data-race around challengetimestamp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

GSD-2022-1004980 staging: rtl8712: fix use after free bugs

staging: rtl8712: fix use after free bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

GSD-2022-1004978 Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag

Input: iforce - wake up after clearing IFORCEXMITRUNNING flag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

Elrond-go has improper initialization

Impact Read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B state, the state will be altered for contract B as if the call was not made in the read-only...

XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor

Impact Through the suggestion feature, string and list properties of objects the user shouldn't have access to can be accessed. This includes private personal information like email addresses and salted password hashes of registered users but also other information stored in properties of objects...

GHSA-599V-W48H-RJRM XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor

Impact Through the suggestion feature, string and list properties of objects the user shouldn't have access to can be accessed. This includes private personal information like email addresses and salted password hashes of registered users but also other information stored in properties of objects...

CVE-2022-40156

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

UBUNTU-CVE-2022-40154

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

UBUNTU-CVE-2022-40156

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

UBUNTU-CVE-2022-40153

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

Canonical Ubuntu Linux 输入验证错误漏洞

Canonical Ubuntu Linux is a Linux operating system from Canonical, a British company. A security vulnerability exists in Canonical Ubuntu Linux that originates from incorrectly handling the reference count of certain objects, resulting in a denial of service. An attacker can exploit the...

Security Bulletin: Information regarding security vulnerability in IBM SDK for Java that is shipped with IBM WebSphere Application Server and addressed by Oracle CPU October 2013

Summary Multiple security vulnerabilities exist in the IBM SDK for Java that is shipped with IBM WebSphere Application Server and included in the products that are listed in this document. Vulnerability Details The products that are listed in the Affected product section are shipped with a versio...

CVE-2022-38789

An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference...

Duplicate of GHSA-m77f-652q-wwp4

Duplicate advisory This advisory is a duplicate of GHSA-m77f-652q-wwp4. This link is maintained to preserve external references. Original Description ::fromrequest would not, by default, set a limit for the size of the request body. That meant if a malicious peer would send a very large or infini...

# _safeMint() should be used rather than _mint() wherever possible

Lines of code Vulnerability details safeMint should be used rather than mint wherever possible Impact In Token.sol.sol, eventually it is called ERC721 mint. Calling mint this way does not ensure that the receiver of the NFT is able to accept them, making possible to lose them. safeMint should be...

vim code issue vulnerability (CNVD-2022-68079)

Vim is a cross-platform text editor. vim versions prior to 9.0.0404 have a code issue vulnerability that stems from null pointer references. No detailed vulnerability details are currently available...

SUSE-SU-2022:3225-1 Security update for mariadb

This update for mariadb fixes the following issues: Update to 10.4.26: - CVE-2022-32089 bsc1201169 - CVE-2022-32081 bsc1201161 - CVE-2022-32091 bsc1201170 - CVE-2022-32084 bsc1201164 - CVE-2018-25032 bsc1197459 - CVE-2022-32088 bsc1201168 - CVE-2022-32087 bsc1201167 - CVE-2022-32086 bsc1201166 -...

XWiki Platform 跨站脚本漏洞

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the French company XWiki. A cross-site scripting vulnerability exists in XWiki Platform versions prior to 13.10.6 and prior to 14.4, which stems from the ability to store Javascript or groovy script in a...