PT-2022-30855

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns a potential problem with directory h-tree cycles in the ext4 filesystem. The actual impact and likelihood of an attack have not been confirmed. Recommendations For Linux...

PT-2022-31818

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A bug was fixed in the ext4 file system, specifically in the es tree search function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2022-31760

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns a potential problem with directory h-tree cycles in the ext4 filesystem. The actual impact and likelihood of an attack have not been confirmed yet. Recommendations For Lin...

PT-2022-32108

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to avoiding cycles in the directory h-tree of the ext4 file system. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...

PT-2022-31277

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.13 through v5.17.13 Description A bug was fixed in the es tree search function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v3.13 through v5.17.13, upda...

PT-2022-30935

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A bug was fixed in the es tree search function of the ext4 filesystem. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-31570

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.13 through v5.15.45 Description A bug was found in the es tree search function of the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v3.13...

PT-2022-31500

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns a potential problem with directory h-tree cycles in the ext4 filesystem. The actual impact and likelihood of an attack have not been confirmed yet. Recommendations For Linu...

PT-2022-31189

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns a potential problem with directory h-tree cycles in the ext4 filesystem. The actual impact and likelihood of an attack have not been confirmed yet. Recommendations For Linu...

ALSA-2022:5344 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915...

CVE-2022-25805

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker who can intercept or inspect traffic between an authenticated UMS client and server to compromise those LDAP bind...

CVE-2022-25805

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker who can intercept or inspect traffic between an authenticated UMS client and server to compromise those LDAP bind...

IGEL Universal Management Suite 安全漏洞

The IGEL Universal Management Suite IGEL UMS is a single management solution from IGEL Germany. It can be used for up to tens of thousands of endpoints running IGEL OS. A security vulnerability exists in IGEL Universal Management Suite UMS version 6.07.100, which originates from the transmission ...

PT-2022-17531

Name of the Vulnerable Software and Affected Versions IGEL Universal Management Suite UMS version 6.07.100 Description An issue was discovered in the transmission of cleartext LDAP bind credentials by the cmd mgt load mgt tree command, allowing an attacker who can intercept or inspect traffic...

stella-tree.com Cross Site Scripting vulnerability OBB-2641582

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Path Traversal in django-s3file

Impact It was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. The issue was discovered by the maintainer. There were no reports of the vulnerability being known to or exploited by a third party, before the release of the patch. If the AWSLOCATION setting...

Merkle Tree criteria can be resolved by wrong tokenIDs

Lines of code Vulnerability details Impact The protocol allows specifying several tokenIds to accept for a single offer. A merkle tree is created out of these tokenIds and the root is stored as the identifierOrCriteria for the item. The fulfiller then submits the actual tokenId and a proof that...

Verifying criteria is prone to known merkle proof attacks

Lines of code Vulnerability details The Merkle hash root does not indicate the tree depth, enabling a second-preimage attack in which an attacker creates a document other than the original that has the same Merkle hash root. For the example above, an attacker can create a new document containing...

Buyer can take from a seller an item they had not offered

Lines of code Vulnerability details Impact Orders in Seaport can involve "criteria-based items", in which case it isn't one specific item that can fulfill the order but any one of a set of items. This set of items is the "criteria", and it is specified in the order as the merkle root of a merkle...

PT-2025-37611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak was resolved in the xvip graph dma init function within the Xilinx ViPP driver of the Linux kernel. The of get child by name function increments the reference coun...