WordPress Migration, Backup, Staging - WPvivid Plugin < 0.9.71 Arbitrary File Read Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

GSD-2022-1002045 media: staging: media: zoran: move videodev alloc

media: staging: media: zoran: move videodev alloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001994 staging: vchiq_core: handle NULL result of find_service_by_handle

staging: vchiqcore: handle NULL result of findservicebyhandle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

GSD-2022-1001993 staging: wfx: fix an error handling in wfx_init_common()

staging: wfx: fix an error handling in wfxinitcommon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

GSD-2022-1001787 media: staging: media: zoran: move videodev alloc

media: staging: media: zoran: move videodev alloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001707 staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances

staging: vchiqarm: Avoid NULL ptr deref in vchiqdumpplatforminstances This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001706 staging: wfx: fix an error handling in wfx_init_common()

staging: wfx: fix an error handling in wfxinitcommon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001466 media: staging: media: zoran: move videodev alloc

media: staging: media: zoran: move videodev alloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001379 staging: wfx: fix an error handling in wfx_init_common()

staging: wfx: fix an error handling in wfxinitcommon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001036 staging: wfx: fix an error handling in wfx_init_common()

staging: wfx: fix an error handling in wfxinitcommon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

staging-alisong.inflationrelief.net Cross Site Scripting vulnerability OBB-2546639

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

staging.jobnow.nz Cross Site Scripting vulnerability OBB-2544975

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-30060

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the media staging component in the Linux Kernel, specifically with the videodev allocation. The actual impact and attack plausibility have not yet been proven...

PT-2022-29416

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the media staging component in the Linux Kernel, specifically with the videodev allocation. The actual impact and attack plausibility have not yet been proven...

PT-2022-29739

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the media staging component in the Linux Kernel, specifically with the videodev allocation. The actual impact and attack plausibility have not yet been proven...

PT-2022-30318

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the media staging component in the Linux Kernel, specifically with the videodev allocation. The actual impact and attack plausibility have not yet been proven...

EXNESS: subdomain takeover at odoo-staging.exness.io

Domain: https://odoo-staging.exness.io PoC https://odoo-staging.exness.io Cname: $ host odoo-staging.exness.io odoo-staging.exness.io is an alias for exness-stg.odoo.com. exness-stg.odoo.com has address 141.95.172.222 exness-stg.odoo.com mail is handled by 10 eu123a.odoo.com. Impact Scam, phishin...

CVE-2022-27844

Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid WordPress plugin versions = 0.9.70...

CVE-2022-27844

CVE-2022-27844 affects the WordPress WPvivid Backup and Migration plugin (WordPress) up to version 0.9.70, with an arbitrary file read vulnerability. Public sources describe the issue across multiple feeds; OpenVAS notes vulnerability in WPvivid Migration, Backup, Staging

CVE-2022-0531

The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the subpage parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting...