GSD-2022-1005314 bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()

bus: hisilpc: fix missing platformdeviceput in hisilpcacpiprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1004959 media: mceusb: Use new usb_control_msg_*() routines

media: mceusb: Use new usbcontrolmsg routines This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

PT-2022-33327 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.16 through v5.19.5 Description: A security issue related to mm/gup and FOLL FORCE COW has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

U.S. General Services Administration: access nagios dashboard using default credentials in ** omon1.fpki.gov, 3.220.248.203**

Summary: when i performing recon on fpki.gov i found nagios dashboard in omon1.fpki.gov, 3.220.248.203 and i accessed it using default credentials username: nagiosadmin password : nagiosadmin Steps To Reproduce: 1. visit these urls : https://omon1.fpki.gov/nagios/side.php...

Informational: PAN-OS: Impact of the NVIDIA Dataplane Development Kit (DPDK) Vulnerability CVE-2022-28199

The Palo Alto Networks Product Security Assurance team evaluated the NVIDIA Dataplane Development Kit DPDK vulnerability CVE-2022-28199 as it relates to our products. This vulnerability causes networking stacks that use the NVIDIA distribution of the DPDK to enter an unrecoverable state when...

PT-2022-6763 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A critical issue has been found in the Linux Kernel, affecting the function tst timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after fre...

GSD-2022-1004899 tty: goldfish: Fix free_irq() on remove

tty: goldfish: Fix freeirq on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.285 by commit c4b0b8edccb0cfb15a8cecf4161e0571d3daac6...

GSD-2022-1004787 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

power/reset: arm-versatile: Fix refcount leak in versatilerebootprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004308 tty: goldfish: Fix free_irq() on remove

tty: goldfish: Fix freeirq on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit a6fcd7ffd76a9c1d998a2d02d518c78a55c5bed8,...

GSD-2022-1004283 x86/boot: Wrap literal addresses in absolute_pointer()

x86/boot: Wrap literal addresses in absolutepointer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.7 by commit...

Safety 代码问题漏洞

Safety is a Python based software package for checking the safety of programs. A security vulnerability exists in Safety Designer 1.11.0 and earlier versions, which stems from a deserialization vulnerability in the .NET Framework classes used and not properly checked, which allows an attacker to...

Internet Bug Bounty: CVE-2022-32214 - HTTP Request Smuggling Due To Improper Delimiting of Header Fields

Original Report: https://hackerone.com/reports/1524692 Impact Depending on the specific web application, HRS can lead to cache poisoning, bypassing of security layers, stealing of credentials and so on...

CVE-2021-3696

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of...

CVE-2022-31600

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of service, compromised integrity, and...

The vulnerability of the Item_field::fix_outer_field function in the MariaDB database management system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Itemfield::fixouterfield function in the MariaDB database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...

GSD-2022-1003762 Input: stmfts - do not leave device disabled in stmfts_input_open

Input: stmfts - do not leave device disabled in stmftsinputopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003760 media: venus: hfi: avoid null dereference in deinit

media: venus: hfi: avoid null dereference in deinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003262 netfilter: nf_tables: memleak flow rule from commit path

netfilter: nftables: memleak flow rule from commit path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1003217 iio: dummy: iio_simple_dummy: check the return value of kstrdup()

iio: dummy: iiosimpledummy: check the return value of kstrdup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1002941 net: mdio: unexport __init-annotated mdio_bus_init()

net: mdio: unexport init-annotated mdiobusinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...