4950 matches found
GSD-2022-1008095 tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
tracing: kprobe: Fix memory leak in testgenkprobe/kretprobecmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...
Security Bulletin: IBM MQ Internet Pass-Thru traces sensitive data (CVE-2022-35719)
Summary An issue was found within IBM MQ Internet Pass-Thru which causes sensitive data to be written to trace files when trace is enabled. Vulnerability Details CVEID:CVE-2022-35719 DESCRIPTION: IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace...
trace-elements.co.uk Cross Site Scripting vulnerability OBB-3080409
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mozilla Firefox Trace XSS
The vulnerability in the implementation of the Trace method exists in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird. This vulnerability stems from the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious...
PT-2024-11841
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the netfilter: flowtable offload. The issue arises when flow offload queue work is called in a workqueue without bh...
PT-2024-11839
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the netfilter conntrack module. The issue occurs when nf conntrack hash check insert fails in nf ct ext valid pre/post,...
CVE-2022-38115
Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT...
CVE-2022-38115: Trusting HTTP Permission Methods on the Server Side
Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT...
PT-2022-24209 · Solarwinds · Solarwinds Sem +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an insecure method vulnerability where allowed HTTP methods are disclosed, including OPTIONS, DELETE, TRACE, and PUT. Recommendations: At the moment, there is no...
CVE-2022-38115
CVE-2022-38115 concerns SolarWinds Security Event Manager (SEM) and is described as an insecure-method vulnerability where HTTP methods (e.g., OPTIONS, DELETE, TRACE, PUT) are disclosed. Connected sources indicate SEM versions 2022.2 and prior are affected. The CVSSv3.1 base score is 5.3 (Medium)...
Mozilla: Cross-Site Tracing was possible via non-standard override headers
The Mozilla Foundation Security Advisory describes this flaw as: Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitiga...
Mozilla: Cross-Site Tracing was possible via non-standard override headers
The Mozilla Foundation Security Advisory describes this flaw as: Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript such as cookies protected by HTTPOnly. To mitiga...
PT-2022-38093
Уязвимость функции eprobe trigger func модуля kernel/trace/trace eprobe.c поддержки трассировки ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2022-38074
Уязвимость функции register synth event модуля kernel/trace/trace events synth.c поддержки трассировки ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отка...
PT-2025-18516
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1-00186-g76f33a7eedb4 Description A bug in the Linux kernel's tracing system has been fixed, which caused a wild-memory-access issue in the register synth event function. If set synth event print fmt...
PT-2022-38091
Уязвимость функций test gen synth cmd и test empty synth event модуля kernel/trace/synth event gen test.c поддержки трассировки ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
trace-cmd bug fix and enhancement update
An update is available for trace-cmd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9....
GSD-2022-1006783 rcu-tasks: Ensure RCU Tasks Trace loops have quiescent states
rcu-tasks: Ensure RCU Tasks Trace loops have quiescent states This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
