DSA-5304-1 xorg-server - security update

Bulletin has no description...

CVE-2022-47500 Apache Helix: Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4. Solution: removed the the forward component since it was improper designed for UI embedding. User please upgrad...

Denial Of Service (DoS)

helm.sh/helm/v3 is vulnerable to denial of service. The vulnerability exists because the parser.go does not properly implement the maximum level of nesting for a value name, allowing an attacker to cause an application crash through stack overflow by passing a malicious string...

DLA-3243-1 php7.3 - security update

Bulletin has no description...

CVE-2022-46061

AeroCMS v0.0.1 is vulnerable to ClickJacking...

DLA-3238-1 pngcheck - security update

Bulletin has no description...

CVE-2022-3930 Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR

The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own...

Cross-site Scripting in Jenkins Spring Config Plugin

Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to change build display names. Spring Config Plugin 2.0.1 escapes build display names show...

CVE-2022-4398 Integer Overflow or Wraparound in radareorg/radare2

Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...

PT-2022-16019 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry versions prior to 22.11.0 Description: Sentry is an error tracking and performance monitoring platform. An attacker with a known valid invite link could manipulate a cookie to allow the same invite link to be reused on multiple account...

DSA-5298-1 cacti - security update

Bulletin has no description...

Arbitrary Code Execution

paddlepaddle is vulnerable to arbitrary code execution. The vulnerability exists in the getwindow function in window.py because it calls eval on user supplied winstr which allows an attacker to inject and execute malicious codes in to the system...

GSD-2022-1008331 dm ioctl: fix misbehavior if list_versions races with module loading

dm ioctl: fix misbehavior if listversions races with module loading This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.334 by commit...

GSD-2022-1008169 dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()

dmaengine: mvxorv2: Fix a resource leak in mvxorv2remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...

GSD-2022-1008115 nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()

nfc: s3fwrn5: Fix potential memory leak in s3fwrn5ncisend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

GSD-2022-1008109 mISDN: fix possible memory leak in mISDN_register_device()

mISDN: fix possible memory leak in mISDNregisterdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

GSD-2022-1008052 nilfs2: fix use-after-free bug of ns_writer on remount

nilfs2: fix use-after-free bug of nswriter on remount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.155 by commit...

GSD-2022-1007949 ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network

ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007940 mctp: Fix an error handling path in mctp_init()

mctp: Fix an error handling path in mctpinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007787 dmaengine: ti: k3-udma-glue: fix memory leak when register device fail

dmaengine: ti: k3-udma-glue: fix memory leak when register device fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...