Sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dscimportinputfromsource of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely...

PT-2022-11680 · Unknown · Dns-Stats Hedgehog

Name of the Vulnerable Software and Affected Versions: dns-stats hedgehog affected versions not specified Description: A vulnerability was found in dns-stats hedgehog, which has been rated as problematic. The issue affects the function DSCIOManager::dsc import input from source of the file...

CVE-2021-4276

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dscimportinputfromsource of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely...

CVE-2021-4276

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dscimportinputfromsource of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely...

CVE-2021-4276

CVE-2021-4276 affects dns-stats hedgehog. The vulnerability lies in DSCIOManager::dsc_import_input_from_source in src/DSCIOManager.cpp, enabling SQL injection. It is stated that the attack could be launched remotely and an exploit has been disclosed, but the real existence is still doubted in som...

CVE-2021-4276: Improper Neutralization of Special Elements used in an SQL Command

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dscimportinputfromsource of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely...

PT-2022-14777 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write in the thermal cooling device stats update function of thermal sysfs.c due to improper input validation. This could lead to local escalation of privilege in th...

DEBIAN-CVE-2022-3106

An issue was discovered in the Linux kernel through 5.16-rc6. ef100updatestats in drivers/net/ethernet/sfc/ef100nic.c lacks check of the return value of kmalloc...

AZL-11607 CVE-2022-3106 affecting package kernel for versions less than 5.15.86.1-1

An issue was discovered in the Linux kernel through 5.16-rc6. ef100updatestats in drivers/net/ethernet/sfc/ef100nic.c lacks check of the return value of kmalloc...

DEBIAN-CVE-2022-3107

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...

PT-2022-35983 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns a potential null pointer dereference in the sparx stats init and sparx5 start functions. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-35982 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: A potential null pointer dereference issue exists in the lan966x stats init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2024-11814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel, specifically in the net/mlx5 module. The issue occurs when a command fails while the driver is reloading and cannot accept firmware...

kernel: hv_netvsc: NULL pointer dereference in netvsc_get_ethtool_stats()

An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarray and will cause the null pointer dereference...

Low: Red Hat Security Advisory: guestfs-tools security, bug fix, and enhancement update

An update for guestfs-tools is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

GSD-2022-1006939 net: broadcom: bcm4908_enet: update TX stats after actual transmission

net: broadcom: bcm4908enet: update TX stats after actual transmission This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006621 net: broadcom: bcm4908_enet: update TX stats after actual transmission

net: broadcom: bcm4908enet: update TX stats after actual transmission This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-34876

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.7 Description The issue is related to the update of TX stats after actual transmission in the bcm4908 enet driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-35194 · Broadcom · Bcm4908 Enet

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to the update of TX stats after actual transmission in the net: broadcom: bcm4908 enet component. The actual impact and attack plausibility have not yet been proven...

Democritus Project d8s-stats Code Execution Vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. democritus Project d8s-stats version 0.1.0 contains a security vulnerability stemming from the presence of a potential code execution backdoor inserted by a third party in t...