GSD-2022-1002631 sfc: fix considering that all channels have TX queues

sfc: fix considering that all channels have TX queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-31790

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to the sfc driver in the Linux Kernel, where a fix is applied considering all channels have TX queues. The actual impact and attack plausibility have not yet been proven...

PT-2022-31024

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.18.2 Description A use-after-free race condition exists related to tx status on station removal. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-31226

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to the sfc driver in the Linux Kernel, where a fix is applied considering all channels have TX queues. The actual impact and attack plausibility have not yet been proven...

IBM CICS TX Standard and Advanced Operating System Command Injection Vulnerability

IBM CICS TX Standard and Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Standard and Advanced is vulnerable to operating system command injection, which can be exploited by...

PT-2022-31355

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.17.13 Description A use-after-free race condition exists related to tx status on station removal. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31532

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the sfc driver in the Linux Kernel, where a fix is applied considering all channels have TX queues. The actual impact and attack plausibility have not yet been proven...

CVE-2022-31767

IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 227980...

CVE-2022-31767

IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 227980...

CVE-2022-31767

CVE-2022-31767 affects IBM CICS TX Standard and Advanced 11.1, enabling remote arbitrary command execution via a specially crafted request. Root cause is a vulnerability in handling requests that allows code execution. The IBM security bulletins for Standard and Advanced 11.1 describe interim fix...

CVE-2022-31767: Improper Neutralization of Special Elements used in an OS Command

IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 227980...

Malicious code in bfx-facs-monitor-tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6ae964cb0d1bdfa408ab9a93d26dae4619ba81e1286f943e4c2f6972eb73454 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1531 Malicious code in bfx-facs-monitor-tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6ae964cb0d1bdfa408ab9a93d26dae4619ba81e1286f943e4c2f6972eb73454 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-8922

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the i40e dbg dump desc function when trying to dump VFs VSI RX/TX descriptors using debugfs. This can cause a crash due to the NUL...

pt.txheatexchanger.com Cross Site Scripting vulnerability OBB-2531583

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CyberArk Identity Security Feature Issue Vulnerability

CyberArk Identity, a CyberArk company, provides the most complete identity security platform to secure all identities from end-to-end.CyberArk Identity is vulnerable to a security signature issue that stems from the fact that the StartAuthentication resource exposes the response header X-CFY-TX-T...

CVE-2022-22700

CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant...

CVE-2022-22700

CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant...

CVE-2022-22700

CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant...

CVE-2022-22700

CyberArk Identity (versions up to 22.1) exposes the response header X-CFY-TX-TM in the StartAuthentication resource. In certain configurations this header contains predictable value ranges that can be used to infer whether a user exists in the tenant. The CVE is CVE-2022-22700; it is a header lea...