GHSA-R326-MP8G-6XFC phpMyAdmin Bypass white-list protection for URL redirection

An issue was discovered in phpMyAdmin. Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

GHSA-FX92-WH72-8G9Q Apache Atlas produces Stack trace in error response

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information...

GHSA-8XQ7-7HCX-8P8G Apache OpenMeetings Directory Traversal vulnerability

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. dot dot in a ZIP archive entry...

GHSA-86V9-GQH9-8268 Moodle vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

Improper Validation of Array Index

The html package aka x/net/html through 2018-09-25 in Go mishandles , leading to a "panic: runtime error" index out of range in insertionModeStack.pop in node.go, called from inHeadIM, during an html.Parse call...

GSD-2022-1001642 i2c: dev: check return value when calling dev_set_name()

i2c: dev: check return value when calling devsetname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit...

WordPress Weblizar Pin It Button On Image Hover And Post plugin <= 3.2 - Arbitrary Settings Update vulnerability

Arbitrary Settings Update vulnerability discovered by Jan w Oleju in WordPress Weblizar Pin It Button On Image Hover And Post plugin versions = 3.2. Solution Update the WordPress Weblizar Pin It Button On Image Hover And Post plugin to the latest available version at least 3.4...

Linux CWA2109 - KeyboardLayout=(Server Default) setting not work as expected

KeyboardLayout=Server Default in Linux CWA2109 is not working, while Linux CWA2108/2106 is working well...

OSV-2022-249 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45591 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::EvaluateValue...

SUSE-SU-2022:0654-1 Security update for php74

This update for php74 fixes the following issues: - CVE-2021-21708: Fixed use after free due to phpfilterfloat failing for ints bsc1196252...

ELM : When we click on upgrade and try to browse we get the error : there was an error on processing web request : status code 400 (bad Request ) : Bad Request

Error : there was an error on processing web request : status code 400 bad Request : Bad Request...

GHSA-6978-VG2J-CC9Q Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10...

OSV-2022-152 UNKNOWN WRITE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44641 Crash type: UNKNOWN WRITE Crash state: NULL...

CVE-2022-0351 Access of Memory Location Before Start of Buffer in vim/vim

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...

Microsoft Intune NAC check in Citrix SSO app not working for newly enrolled Andorid devices

Intune NAC check in Citrix SSO app is not working with Citrix Gateway on Android 9.0+ devices...

OSV-2022-64 Heap-buffer-overflow in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43870 Crash type: Heap-buffer-overflow WRITE Crash state: repeat pere cliregcompreal...

CVE-2021-46350

There is an Assertion 'ecmaisvalueobject value' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0...

CVE-2021-46338

There is an Assertion 'ecmaislexicalenvironment objectp' failed at /base/ecma-helpers.cecmagetlexenvtype in JerryScript 3.0.0...

SUSE-SU-2022:0110-1 Security update for virglrenderer

This update for virglrenderer fixes the following issues: - CVE-2022-0175: Fixed missing initialization of res-ptr bsc1194601...

Out-of-bounds Write in actix-web

An issue was discovered in the actix-web crate before 0.7.19 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memory corruption...