PT-2025-43073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free condition within the dm thin subsystem, specifically in the run timer softirq function. This issue arises when dm resume and dm destroy...

kernel: dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in dmsmregisterthresholdcallback Fault inject on pool metadata device reports: BUG: KASAN: use-after-free in dmpoolregistermetadatathreshold+0x40/0x80 Read of size 8 at addr ffff8881b9d50068 by...

kernel: dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in dmsmregisterthresholdcallback Fault inject on pool metadata device reports: BUG: KASAN: use-after-free in dmpoolregistermetadatathreshold+0x40/0x80 Read of size 8 at addr ffff8881b9d50068 by...

The vulnerability in the web interface of Cisco BroadWorks Hosted Thin Receptionist allows a attacker to disclose protected information.

The vulnerability of the Cisco BroadWorks Hosted Thin Receptionist software’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Cisco BroadWorks 跨站脚本漏洞

Cisco BroadWorks is a carrier-grade unified communications software platform from Cisco. It is used to deploy cloud calls from public network platforms on any type of wired or wireless network architecture. A cross-site scripting vulnerability exists in Cisco BroadWorks Hosted Thin Receptionist,...

PT-2022-5298 · Cisco · Cisco Broadworks Hosted Thin Receptionist

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks Hosted Thin Receptionist affected versions not specified Description: A vulnerability in the web management interface could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

GSD-2022-1005995 dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

dm thin: fix use-after-free crash in dmsmregisterthresholdcallback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005819 dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

dm thin: fix use-after-free crash in dmsmregisterthresholdcallback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005551 dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

dm thin: fix use-after-free crash in dmsmregisterthresholdcallback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005190 dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

dm thin: fix use-after-free crash in dmsmregisterthresholdcallback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-32926

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description A data-race issue exists around sysctl tcp thin linear timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.20...

PT-2022-33033

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description A data-race issue exists around sysctl tcp thin linear timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32780

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description A data-race issue exists around sysctl tcp thin linear timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32369

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description A data-race issue exists around sysctl tcp thin linear timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.1...

Important: Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.0]

An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3502 Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-0636

A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash...

CVE-2022-0636

A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash...

CVE-2022-0636

A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash...