Design/Logic Flaw

In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-14770 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a permissions bypass in the registerReceivers method of DeviceCapabilityListener.java. This could allow an attacker to change the preferred TTY mode, potentially leading to loca...

BigBlueButton 访问控制错误漏洞

BigBlueButton is an open source web conferencing system from the BigBlueButton community. An access control error vulnerability exists in versions prior to BigBlueButton 2.4-rc-6 that stems from being subject to an invalid user ban, which could be exploited by an attacker to register multiple use...

PT-2022-14749 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in the registerBroadcastReceiver method of RcsService.java. This could allow for a local escalation of privilege without requiring additional executio...

CVE-2022-38488

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

CVE-2022-38488

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

Sql injection

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

CVE-2022-38488

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

GSD-2022-1007945 dmaengine: ti: k3-udma-glue: fix memory leak when register device fail

dmaengine: ti: k3-udma-glue: fix memory leak when register device fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

PT-2022-36161 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: A potential memory leak issue exists in the register pcpu function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.6 and is fixe...

PT-2022-36364 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: A potential memory leak issue exists in the mISDN register device function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.30...

PT-2022-36301 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue is related to the misuse of put device in mISDN register device. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-36547 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: A potential memory leak issue was identified in the register pcpu function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35995 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0.8 through v6.0.10 Description: The issue concerns a misuse of put device in the mISDN register device function. This problem was introduced in version v6.0.8 and fixed in version v6.0.10. The actual impact and attac...

PT-2022-36300 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: A potential memory leak issue exists in the register pcpu function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.6 and is fix...

PT-2022-36483 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.19.265 through v4.19.266 Description: The issue is related to the misuse of put device in mISDN register device. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36447 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.224 Description: A potential memory leak issue exists in the mISDN register device function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.30...

PT-2022-36215 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.79 Description: The issue concerns a wrong reg type conversion in the release reference function. It was introduced in version v4.20 and fixed in Linux Kernel version v5.15.79. The actual impact and attack...