HackerOne: Ability to escape database transaction through SQL injection, leading to arbitrary code execution

HackerOne has an internal backend interface that gives debugging capabilities to its engineers. One of the features is the ability to run EXPLAIN ANALYZE queries against a connected database. This feature is accessible by a handful of engineers. The feature is vulnerable to a SQL injection that...

DEBIAN-CVE-2022-1158

A flaw was found in KVM. When updating a guest's page table entry, vmpgoff was improperly used as the offset to get the page's pfn. As vaddr and vmpgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and...

CVE-2022-1158

A flaw was found in KVM. When updating a guest's page table entry, vmpgoff was improperly used as the offset to get the page's pfn. As vaddr and vmpgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and...

AZL-10540 CVE-2022-1158 affecting package kernel for versions less than 5.15.67.1-4

A flaw was found in KVM. When updating a guest's page table entry, vmpgoff was improperly used as the offset to get the page's pfn. As vaddr and vmpgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and...

Memory corruption

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem...

CVE-2022-1012

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem...

Amazon Linux AMI : kernel (ALAS-2022-1624)

The version of kernel installed on the remote host is prior to 4.14.287-148.504. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1624 advisory. There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow...

PT-2025-25897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the drm/amd/pm component. The issue arises from the allocation of memory for gpu metrics table in the smu v13...

mariadb: server crash in create_tmp_table::finalize

A flaw was found in MariaDB. The component, Createtmptable::finalize, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)

MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...

kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak

The Linux kernel's TCP source port generation algorithm in the TCP stack contains a flaw due to the small table perturb size. This flaw allows an attacker to positively distinguish a system among devices with identical hardware and software, which lasts until the device restarts. An attacker can...

Fedora: Security Advisory for golang-github-olekukonko-tablewriter (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-olekukonko-tablewriter-0.0.5-4.fc36

ASCII Table Writer...

mariadb: server crash in create_tmp_table::finalize

A flaw was found in MariaDB. The component, Createtmptable::finalize, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

PT-2022-8901 · Unknown · Markdown-It-Toc

Name of the Vulnerable Software and Affected Versions: markdown-it-toc versions affected versions not specified Description: The issue affects the generation of the table of contents toc in markdown-it-toc, where the title of the generated toc and the contents of the header are not properly...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58178）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. sourceCodester Multi Restaurant Table Reservation System version 1.0 is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58180）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...

markdown-it-toc 跨站脚本漏洞

markdown-it-toc is a syntax for adding an automatically generated table of contents to the markdown-it markdown parser by the US-based individual developer Sam Chrisinger. A security vulnerability exists in markdown-it-toc, which stems from the fact that the title and the content of the title of...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58181）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58182）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...