13092 matches found
GSD-2022-1004493 usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
usb: gadget: lpc32xxudc: Fix refcount leak in lpc32xxudcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...
GSD-2022-1004475 bpf: Fix request_sock leak in sk lookup helpers
bpf: Fix requestsock leak in sk lookup helpers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...
GSD-2022-1004309 i40e: Fix call trace in setup_tx_descriptors
i40e: Fix call trace in setuptxdescriptors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...
GSD-2022-1004242 memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings
memory: samsung: exynos5422-dmc: Fix refcount leak in ofgetdramtimings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...
GSD-2022-1004196 wifi: mac80211: fix queue selection for mesh/OCB interfaces
wifi: mac80211: fix queue selection for mesh/OCB interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...
GSD-2022-1004162 net: sfp: fix memory leak in sfp_probe()
net: sfp: fix memory leak in sfpprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit f22ddc8a5278d7fb6369a0aeb0d8775a0aefaae...
CVE-2022-2550 OS Command Injection in hestiacp/hestiacp
OS Command Injection in GitHub repository hestiacp/hestiacp prior to 1.6.5...
OSV-2022-636 UNKNOWN READ in fp_cmp_mag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49510 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...
CVE-2022-1496
Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...
Malicious code in totaralms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c9db01a67113b6a65bda9e61a061e87b78052c4c25c020444d03f2f88d892c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-33438
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow in jsonparsearray in mjs.c...
Command Injection
deferred-exec is vulnerable to command injection. The vulnerability exists in deferredChildProcess function in deferred-exec.js because the command execution is not properly validated which allows an attacker to inject and execute malicious commands...
Command Injection
git-archive is vulnerable to command injection. A local authenticated attacker is able to inject and execute malicious commands through the exports function in index.js...
conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2
This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This can be exploited further depending on the context...
CVE-2022-34961
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Users Timeline module...
CVE-2020-28471
This affects the package properties-reader before 2.2.0...
EUVD-2022-6430
The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js...
Remote Code Execution (RCE)
Redis is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the input allowing an attacker to inject maliciously crafted script into the system...