PT-2022-32034

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.146 through 5.4.197 Description The issue is related to a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2022-31018

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.18.3 Description The issue concerns a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-31531

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue concerns an interaction between wait for device probe and deferred probe timeout in the driver core. The actual impact and attack plausibility have not yet been proven...

PT-2022-31225

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue concerns an interaction between wait for device probe and deferred probe timeout in the driver core. The actual impact and attack plausibility have not yet been proven...

PT-2022-32272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31788

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue concerns an interaction between wait for device probe and deferred probe timeout in the driver core. The actual impact and attack plausibility have not yet been proven...

PT-2022-30895

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue concerns an interaction between wait for device probe and deferred probe timeout in the driver core. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-32160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31643

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-32339

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue concerns a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations F...

CVE-2022-31093

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using NextAuth.js with an invalid callbackUrl query parameter, which internally is converted to a URL object. The URL instantiation would fail due ...

Design/Logic Flaw

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using NextAuth.js with an invalid callbackUrl query parameter, which internally is converted to a URL object. The URL instantiation would fail due ...

CVE-2022-31093 Improper Handling of `callbackUrl` parameter in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using NextAuth.js with an invalid callbackUrl query parameter, which internally is converted to a URL object. The URL instantiation would fail due ...

CVE-2022-31093: Improper Check for Unusual or Exceptional Conditions

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using NextAuth.js with an invalid callbackUrl query parameter, which internally is converted to a URL object. The URL instantiation would fail due ...

ZEIT Next.js 代码问题漏洞

ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. NextAuth.js is the authentication for Next.js. A code issue vulnerability exists in Next.js NextAuth.js versions prior to 3.29.5 and prior to 4.5.0 that stems from a lack of validati...

Security Bulletin: Cúram Social Program Management is affected by session timeout issues (CVE-2022-22318, CVE-2022-22317)

Summary IBM Cúram Social Program Management is affected by session timeout issues. For these vulnerabilities some modal dialogs in SPM do not invalidate the session after timeout or logout, which could allow an authenticated user to impersonate another user on the system. Vulnerability Details...

CVE-2022-20133

In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Design/Logic Flaw

In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-14372 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to a missing permission check in the setDiscoverableTimeout function of AdapterService.java. This could lead to a bypass of user interaction, resulting in local...

PT-2025-26024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash in the Linux kernel has been resolved, related to the scsi: qla2xxx module. The issue occurs due to stale SRB access around I/O timeouts. To fix this, the code now ensures that t...