CVE-2022-2274

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X8664 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a...

PT-2022-7448 · Net Snmp +8 · Net-Snmp +8

Name of the Vulnerable Software and Affected Versions: net-snmp versions prior to 5.9.2 Description: The issue is related to a NULL pointer dereference in the NET-SNMP-AGENT-MIB::nsLogTable function. A user with read-write credentials can use a malformed OID in a SET request to cause this issue. ...

Net-SNMP code-related vulnerabilities

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices, and more. A code issue vulnerability exists in Net-SNMP that stems from a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable...

Net-SNMP buffer error vulnerability

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices, and more. Net-SNMP suffers from a buffer error vulnerability that stems from a misformatted OID in a SET request to...

CVE-2022-33329

Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The /ajax/setsystime/...

CVE-2022-34778

Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain job-level options are set, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs or contro...

UBUNTU-CVE-2022-2078

A vulnerability was found in the Linux kernel's nftsetdescconcatparse function .This flaw allows an attacker to trigger a buffer overflow via nftsetdescconcatparse , causing a denial of service and possibly to run code...

Buffer overflow

A vulnerability was found in the Linux kernel's nftsetdescconcatparse function .This flaw allows an attacker to trigger a buffer overflow via nftsetdescconcatparse , causing a denial of service and possibly to run code...

Robustel R1510: Operating System Command Injection Vulnerability

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the /ajax/setsystime/...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. An attacker exploits the vulnerability to trigger a buffer overflow via nftsetdescconcatparse, which could lead to a denial...

GSD-2022-1003231 tcp: add accessors to read/set tp->snd_cwnd

tcp: add accessors to read/set tp-sndcwnd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability

The latest version of the OpenSSL library has been discovered as susceptible to a remote memory-corruption vulnerability on select systems. The issue has been identified in OpenSSL version 3.0.4, which was released on June 21, 2022, and impacts x64 systems with the AVX-512 instruction set. OpenSS...

CVE-2022-32205

A vulnerability was found in curl. This issue occurs because a malicious server can serve excessive amounts of Set-Cookie: headers in an HTTP response to curl, which stores all of them. This flaw leads to a denial of service, either by mistake or by a malicious actor...

PT-2022-31855

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential memory leak issue exists in the mdp5 crtc cursor set function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.0 and i...

PT-2022-31248

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns a double free of io acct set bioset. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17.14, update...

PT-2022-30968

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns a fix to always unmap the whole page in the set mce nospec function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32297

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A potential issue exists in the Linux Kernel related to a deadlock in the sa1100 set termios function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-32090

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A potential issue exists in the Linux Kernel related to a deadlock in the sa1100 set termios function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-31157

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A potential issue exists in the Linux Kernel related to a deadlock in the sa1100 set termios function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-31944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential issue exists in the Linux Kernel related to a deadlock in the sa1100 set termios function. The actual impact and attack plausibility have not yet been proven. Recommendations For...