PT-2022-17345 · Unknown · Stb Truetype.H

Name of the Vulnerable Software and Affected Versions: stb truetype.h version 1.26 Description: A heap-buffer-overflow issue was discovered in the stbtt find table function at stb truetype.h. It is noted that the source code includes a disclaimer stating it should only be used with trusted input....

CVE-2021-39735

In gasketalloccoherentmemory of gasketpagetable.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2021-39725

In gasketfreecoherentmemoryall of gasketpagetable.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

CVE-2022-22353

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480...

CVE-2022-22353

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480...

Information disclosure

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480...

IBM Big SQL 缓冲区错误漏洞

IBM Big SQL is an enterprise-class, ANSI-compliant, hybrid SQL -on-Hadoop engine from IBM USA that provides massively parallel processing MPP and advanced data querying. A buffer error vulnerability exists in IBM Big SQL that allows an authenticated user with appropriate privileges to obtain...

IBM Cloud Pak for Data 安全漏洞

IBM Big SQL is an enterprise-class, ANSI-compliant hybrid SQL-on-Hadoop engine from IBM that provides massively parallel processing MPP and advanced data querying.IBM Big SQL contains a security vulnerability that could be exploited to allow an authenticated user with appropriate privileges to...

DEBIAN-CVE-2022-26981

Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c called, indirectly, by tools/louchecktable.c...

UBUNTU-CVE-2022-26981

Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c called, indirectly, by tools/louchecktable.c...

PT-2022-18160 · Liblouis +6 · Liblouis +6

Name of the Vulnerable Software and Affected Versions: Liblouis versions prior to 3.21.1 Description: The issue is related to a buffer overflow in the compilePassOpcode function within compileTranslationTable.c, which can be indirectly called by tools/lou checktable.c. Recommendations: For versio...

Remote Code Execution (RCE)

cmark-gfm is vulnerable to remote code execution. The vulnerability exists due to an integer overflow in cmark-gfm's table row parsing table.c:rowfromstring...

Security Bulletin: Data masking rules are not enforced when CREATE TABLE AS SELECT statement is executed in IBM Big SQL

Summary A software defect in IBM Big SQL prevents data masking rules to be enforced when a user executes CREATE TABLE AS SELECT … WITH DATA statement. The newly created table contains unmasked data. Vulnerability Details CVEID:CVE-2022-22353 DESCRIPTION: IBM Big SQL could allow an authenticated...

CVE-2022-25511

An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system...

CVE-2022-23040

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

DEBIAN-CVE-2022-23036

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

DEBIAN-CVE-2022-23040

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

DEBIAN-CVE-2022-23042

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23040

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23038

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...