Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

Symbiote Seed 输入验证错误漏洞

Symbiote Seed is a set of modules that provide a solid foundation for building SilverStripe websites. An input validation error vulnerability exists in Symbiote Seed versions prior to 6.0.3, which stems from a problem with the onBeforeSecurityLogin function in the...

Snipe-IT 安全漏洞

Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in Snipe-IT versions prior to 6.0.14, which stems from the fact that an attacker can check the existence of a user account via response variables to password and reset requests...

VulnCheck KEV: CVE-2020-7209

LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2...

Akeneo PIM Development Repository 代码注入漏洞

Akeneo PIM Development Repository is an Akeneo open source repository . It is used to develop Akeneo PIM products. A code injection vulnerability exists in Akeneo PIM Development Repository versions prior to v5.0.119 and v6.0.53, which originates from a code injection vulnerability that could all...

PT-2022-35966 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns an invalid length check when fetching device IDs. This problem was introduced in version v5.3 and is fixed in Linux Kernel version v6.0.10. The actual impact and attack...

PT-2022-36050 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: A potential buffer overflow issue exists in the brcmf fweh event worker function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-35969 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to a possible memory leak in the iio sysfs trig init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36093 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to a possible leaked pernet namespace in the smc init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35983 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns a potential null pointer dereference in the sparx stats init and sparx5 start functions. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-35995 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0.8 through v6.0.10 Description: The issue concerns a misuse of put device in the mISDN register device function. This problem was introduced in version v6.0.8 and fixed in version v6.0.10. The actual impact and attac...

PT-2022-35997 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns the mctp i2c, where unused or invalid keys are counted for flow release. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-26948 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 6.0.3 Description: A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script. The developer provides new patched releases for all versions since 3.7. Recommendations: For...

PT-2022-35123 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a send buffer overflow in NFSv2 READDIR. It was introduced in version v5.16 and is fixed in Linux Kernel version v6.0.3. The actual impact and attack plausibility have not...

PT-2022-34947 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to a null pointer dereference in the blk mq clear rq mapping function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2022-34986 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: The issue is related to RDMA/rxe, where delete error messages are triggered by incoming Read requests. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34973 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A bounds check has been added on Transfer Tag in nvmet-tcp. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-34907 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue concerns a memory leakage related to Page Table Entries PTE in the Linux Kernel. It was introduced in version v5.15 and fixed in version v6.0.7. The actual impact and attack...

PT-2022-35084 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.7 through v6.0.2 Description: A refcount leak bug was discovered in the of get ddr timings function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.7 and...