PT-2022-29138

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue is related to the bpf component in the Linux Kernel. It involves adding schedule points in batch operations. The actual impact and attack plausibility have not yet been proven...

PT-2022-29136

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue is related to the io uring functionality in the Linux Kernel. It involves adding a schedule point in the io add buffers function. The actual impact and potential for attack have no...

bETH rewards can be timed

Lines of code Vulnerability details Impact The bETH reward contract allocates new rewards sent to the contract whenever updateglobalindex is called. It should be possible to time the transfer of the rewards to the contract and frontrun it with increasing one's token balance to capture more reward...

Android Security Bulletin—March 2022Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2022-03-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

pferdebalsam-teufelskralle.de Improper Access Control vulnerability OBB-2407441

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Citrix PVS 1912: VDA servers boot fails randomly by error "PXE -32: TFTP open timeout no operating system found" during Restart schedule

VDA servers boot fails randomly by error "PXE -32: TFTP open timeout no operating system found" during Restart schedule...

Hospital Management System Cross-Site Scripting Vulnerability (CNVD-2022-67484)

HealthNode Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from t...

Hospital Management System Cross-Site Scripting Vulnerability (CNVD-2022-67482)

Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from the lack of...

WordPress WP Conference Schedule plugin < 1.1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Conference Schedule plugin versions 1.1.0. Solution Update the WordPress WP Conference Schedule plugin to the latest available version at least 1.1.0...

WordPress WP Conference Schedule plugin < 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Conference Schedule plugin versions 1.1.0. Solution Update the WordPress WP Conference Schedule plugin to the latest available version at least 1.1.0...

PT-2022-28872

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.4 Description The issue concerns a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28516

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.18 Description The issue is related to a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28457

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.95 Description The issue is related to a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28423

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.175 Description The issue is related to a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28396

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.227 Description The issue concerns a fix for an indefinitely sleeping task in the poll schedule timeout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

CVE-2021-44362

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetCloudSchedule param is not object. An attacker can send an HTTP request to trigger this vulnerability...

SourceCodester Online Covid Vaccination Scheduler System跨站脚本漏洞（CNVD-2022-13077）

SourceCodester Online Covid Vaccination Scheduler System is an application of SourceCodester, Inc. Sourcecodester Online Covid Vaccine Scheduler System is a cross-site scripting vulnerability that stems from the lack of escaping or filtering of user data in the software lid parameter, which could...

CVE-2021-41930

Cross site scripting XSS vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php...

CVE-2021-41930

Cross site scripting XSS vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php...

PT-2022-9535

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations WordPress plugin versions prior to 2.4.8 Description The issue concerns a lack of capability and CSRF checks in the rtb welcome set schedule AJAX action. This allows any authenticated users to call the action,...